oizys/hosts/algiz/default.nix

49 lines
1 KiB
Nix
Raw Normal View History

2024-01-23 11:51:13 -06:00
{
self,
2024-01-23 11:51:13 -06:00
pkgs,
2024-03-19 07:31:31 -05:00
lib,
2024-01-23 11:51:13 -06:00
...
2024-03-19 08:56:51 -05:00
}: let
inherit (lib) enabled;
2024-03-19 07:31:31 -05:00
in {
imports = with self.nixosModules; [
2024-02-07 09:52:52 -06:00
restic
2024-01-23 11:51:13 -06:00
];
2024-03-19 08:56:51 -05:00
oizys = {
languages = [
"nim"
"python"
];
docker = enabled;
backups = enabled;
2024-03-19 08:56:51 -05:00
};
2024-01-23 15:50:42 -06:00
2024-01-23 11:51:13 -06:00
environment.systemPackages = with pkgs; [
(writeShellScriptBin "gitea" ''
2024-01-29 09:57:03 -06:00
ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.1 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"
2024-01-29 10:43:35 -06:00
'')
2024-01-23 11:51:13 -06:00
];
2024-01-23 15:50:42 -06:00
2024-01-23 11:51:13 -06:00
services.restic.backups.gdrive = {
# directories created by gitea and soft-serve aren't world readable
user = "root";
rcloneConfigFile = "/home/daylin/.config/rclone/rclone.conf";
repository = "rclone:g:archives/algiz";
passwordFile = "/home/daylin/.config/restic/algiz-pass";
paths = ["/home/daylin/services/git/" "/home/daylin/services/gotosocial/" "home/daylin/services/caddy"];
};
security.sudo.wheelNeedsPassword = false;
2024-01-28 13:09:34 -06:00
users.users = {
2024-01-23 11:51:13 -06:00
daylin = {
2024-01-28 13:09:34 -06:00
extraGroups = ["docker"];
2024-01-23 11:51:13 -06:00
};
2024-02-15 10:28:25 -06:00
2024-01-23 11:51:13 -06:00
git = {
isNormalUser = true;
};
};
}