SelfPrivacy/selfprivacy-nixos-infect
1
0
Fork 0
mirror of https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-infect.git synced 2024-11-25 13:01:28 +00:00
Code Issues Projects Releases Wiki Activity

Updated services logic

Browse source
This commit is contained in:
Illia Chub 2020-12-21 12:55:36 +02:00
parent 1e3176e777
commit b2ccc9be90
1 changed files with 38 additions and 47 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

85
nixos-infect
View file

@ -138,42 +138,37 @@ EOF
{ pkgs, ... }:
{
users.groups.acmerecievers = {
members = [ "nginx" "dovecot2" "postfix" "virtualMail" "ocserv" ];
members = [ "nginx" "dovecot2" "postfix" "virtualMail" "bitwarden_rs" "nextcloud" "uwsgi" ];
};
security.acme = {
acceptTerms = true;
email = "$USER@$DOMAIN";
certs."$DOMAIN" = {
group = "acmerecievers";
};
};
}
EOF
mkdir -p /etc/nixos/letsencrypt
cat > /etc/nixos/letsencrypt/acme.nix << EOF
{ pkgs, ... }:
{
systemd = {
timers.certbot-renew = {
wantedBy = [ "timers.target" ];
partOf = [ "certbot-renew.service" ];
timerConfig.OnCalendar = "monthly";
};
services.certbot-renew = {
path = with pkgs; [
letsencrypt
];
serviceConfig = {
Type = "oneshot";
ExecStart = "${pkgs.letsencrypt}/bin/certbot renew";
certs = {
"$DOMAIN" = {
group = "acmerecievers";
};
"git.$DOMAIN" = {
group = "acmerecievers";
};
"cloud.$DOMAIN" = {
group = "acmerecievers";
};
"password.$DOMAIN" = {
group = "acmerecievers";
};
"api.$DOMAIN" = {
group = "acmerecievers";
};
"meet.$DOMAIN" = {
group = "acmerecievers";
};
};
};
}
EOF
cat > /etc/nixos/letsencrypt/acme.nix << EOF
mkdir -p /etc/nixos/letsencrypt
cat > /etc/nixos/letsencrypt/certbot.nix << EOF
{ pkgs, ... }:
{
systemd = {
@ -399,27 +394,23 @@ EOF
httpAddress = "0.0.0.0";
httpPort = 3000;
cookieSecure = true;
extraConfig = ''
[mailer]
ENABLED = false
[ui]
DEFAULT_THEME = arc-green
[ui.meta]
AUTHOR = $NAME $SURNAME
DESCRIPTION = $NAME's Personal Git Repository
KEYWORDS = development
[picture]
DISABLE_GRAVATAR = true
[admin]
ENABLE_KANBAN_BOARD = true
[repository]
FORCE_PRIVATE = false
'';
settings = {
mailer = {
ENABLED = false;
};
ui = {
DEFAULT_THEME = "arc-green";
};
picture = {
DISABLE_GRAVATAR = true;
};
admin = {
ENABLE_KANBAN_BOARD = true;
};
repository = {
FORCE_PRIVATE = false;
};
};
};
};
}