mirror of
https://github.com/daylinmorgan/oizys.git
synced 2024-11-05 10:13:14 -06:00
50 lines
1.1 KiB
Nix
50 lines
1.1 KiB
Nix
{
|
|
inputs,
|
|
pkgs,
|
|
...
|
|
}:{
|
|
imports = with inputs.self.nixosModules; [
|
|
docker
|
|
];
|
|
|
|
languages = {
|
|
nim = true;
|
|
python = true;
|
|
};
|
|
cli.enable = true;
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
rclone
|
|
|
|
(pkgs.writeShellScriptBin "gitea" ''
|
|
ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.1 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"
|
|
'')
|
|
];
|
|
|
|
# https://francis.begyn.be/blog/nixos-restic-backups
|
|
# TODO: parameterize to use on algiz AND othalan ...
|
|
services.restic.backups.gdrive = {
|
|
# directories created by gitea and soft-serve aren't world readable
|
|
user = "root";
|
|
rcloneConfigFile = "/home/daylin/.config/rclone/rclone.conf";
|
|
repository = "rclone:g:archives/algiz";
|
|
passwordFile = "/home/daylin/.config/restic/algiz-pass";
|
|
paths = ["/home/daylin/services/git/" "/home/daylin/services/gotosocial/" "home/daylin/services/caddy"];
|
|
};
|
|
|
|
security.sudo.wheelNeedsPassword = false;
|
|
|
|
users.users = {
|
|
daylin = {
|
|
extraGroups = ["docker"];
|
|
};
|
|
git = {
|
|
isNormalUser = true;
|
|
};
|
|
};
|
|
|
|
programs.gnupg.agent = {
|
|
enable = true;
|
|
enableSSHSupport = true;
|
|
};
|
|
}
|