format nix code
This commit is contained in:
parent
e776e94484
commit
d341c0c3f1
@ -9,9 +9,18 @@
|
||||
networking.hostName = "desktop1";
|
||||
|
||||
networking.bridges.br0.interfaces = [ "enp4s0" ];
|
||||
networking.interfaces.br0.ipv4.addresses = [ { address = "192.168.1.146"; prefixLength = 24; } ];
|
||||
networking.interfaces.br0.ipv4.addresses = [
|
||||
{
|
||||
address = "192.168.1.146";
|
||||
prefixLength = 24;
|
||||
}
|
||||
];
|
||||
networking.defaultGateway = "192.168.1.254";
|
||||
networking.nameservers = [ "192.168.1.202" "192.168.1.137" "192.168.1.49" ];
|
||||
networking.nameservers = [
|
||||
"192.168.1.202"
|
||||
"192.168.1.137"
|
||||
"192.168.1.49"
|
||||
];
|
||||
|
||||
age.identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
||||
|
||||
|
||||
@ -9,9 +9,18 @@
|
||||
networking.hostName = "server1";
|
||||
|
||||
networking.bridges.br0.interfaces = [ "ens18" ];
|
||||
networking.interfaces.br0.ipv4.addresses = [ { address = "192.168.1.197"; prefixLength = 24; } ];
|
||||
networking.interfaces.br0.ipv4.addresses = [
|
||||
{
|
||||
address = "192.168.1.197";
|
||||
prefixLength = 24;
|
||||
}
|
||||
];
|
||||
networking.defaultGateway = "192.168.1.254";
|
||||
networking.nameservers = [ "192.168.1.202" "192.168.1.137" "192.168.1.49" ];
|
||||
networking.nameservers = [
|
||||
"192.168.1.202"
|
||||
"192.168.1.137"
|
||||
"192.168.1.49"
|
||||
];
|
||||
|
||||
age.identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
||||
|
||||
|
||||
@ -23,7 +23,9 @@ in
|
||||
privateNetwork = true;
|
||||
hostBridge = net.bridge;
|
||||
localAddress = cfg.ip;
|
||||
config = { ... }: {
|
||||
config =
|
||||
{ ... }:
|
||||
{
|
||||
system.stateVersion = "25.11";
|
||||
|
||||
services.httpd = {
|
||||
|
||||
@ -47,12 +47,19 @@ in
|
||||
privateNetwork = true;
|
||||
hostBridge = net.bridge;
|
||||
localAddress = cfg.ip;
|
||||
config = { ... }: {
|
||||
config =
|
||||
{ ... }:
|
||||
{
|
||||
system.stateVersion = "25.11";
|
||||
|
||||
networking.defaultGateway = net.gateway;
|
||||
networking.nameservers = net.dns;
|
||||
networking.firewall.allowedTCPPorts = [ 80 443 880 4443 ];
|
||||
networking.firewall.allowedTCPPorts = [
|
||||
80
|
||||
443
|
||||
880
|
||||
4443
|
||||
];
|
||||
|
||||
systemd.services.traefik.serviceConfig.EnvironmentFile = [
|
||||
"/run/secrets/traefik-cf-tk"
|
||||
@ -180,122 +187,167 @@ in
|
||||
|
||||
chat = {
|
||||
rule = "Host(`chat.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "chat";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
crafty = {
|
||||
rule = "Host(`crafty.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "crafty";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
cyberchef = {
|
||||
rule = "Host(`cyberchef.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "cyberchef";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
gitea = {
|
||||
rule = "Host(`gitea.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "gitea";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
jellyfin = {
|
||||
rule = "Host(`jellyfin.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "jellyfin";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
kuma = {
|
||||
rule = "Host(`kuma.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "kuma";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
kutt = {
|
||||
rule = "Host(`kutt.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "kutt";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
matrix = {
|
||||
rule = "Host(`matrix.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "matrix";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
mirror = {
|
||||
rule = "Host(`mirror.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "mirror";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
ombi-anime = {
|
||||
rule = "Host(`ombi-anime.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "ombi-anime";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
ombi = {
|
||||
rule = "Host(`ombi.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "ombi";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
share = {
|
||||
rule = "Host(`share.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "share";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
vault = {
|
||||
rule = "Host(`vault.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "vault";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
wordpress = {
|
||||
rule = "Host(`wordpress.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "wordpress";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
mail = {
|
||||
rule = "Host(`autoconfig.smayzy.ovh`) || Host(`autodiscover.smayzy.ovh`) || Host(`mail.smayzy.ovh`) || Host(`mta-sts.mail.smayzy.ovh`) || Host(`mta-sts.smayzy.ovh`) || Host(`smayzy.ovh`) || Host(`www.smayzy.ovh`)";
|
||||
entryPoints = [ "ext" "extSec" ];
|
||||
entryPoints = [
|
||||
"ext"
|
||||
"extSec"
|
||||
];
|
||||
service = "mail";
|
||||
tls.certResolver = "cloudflare";
|
||||
};
|
||||
};
|
||||
services = {
|
||||
"bazarr-anime".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.147:6768" ; } ];
|
||||
servers = [ { url = "http://192.168.1.147:6768"; } ];
|
||||
};
|
||||
"bazarr".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.147:6767" ; } ];
|
||||
servers = [ { url = "http://192.168.1.147:6767"; } ];
|
||||
};
|
||||
"lidarr".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.147:8686" ; } ];
|
||||
servers = [ { url = "http://192.168.1.147:8686"; } ];
|
||||
};
|
||||
"nzbget".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.147:6789" ; } ];
|
||||
servers = [ { url = "http://192.168.1.147:6789"; } ];
|
||||
};
|
||||
"prowlarr".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.147:9696" ; } ];
|
||||
servers = [ { url = "http://192.168.1.147:9696"; } ];
|
||||
};
|
||||
"qbittorrent".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.147:8080" ; } ];
|
||||
servers = [ { url = "http://192.168.1.147:8080"; } ];
|
||||
};
|
||||
"radarr".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.147:7878" ; } ];
|
||||
servers = [ { url = "http://192.168.1.147:7878"; } ];
|
||||
};
|
||||
"sonarr-anime".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.147:8988" ; } ];
|
||||
servers = [ { url = "http://192.168.1.147:8988"; } ];
|
||||
};
|
||||
"sonarr".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.147:8989" ; } ];
|
||||
servers = [ { url = "http://192.168.1.147:8989"; } ];
|
||||
};
|
||||
"srv1-proxmox".loadBalancer = {
|
||||
servers = [ { url = "https://192.168.1.193:8006"; } ];
|
||||
@ -307,49 +359,49 @@ in
|
||||
};
|
||||
|
||||
"chat".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.114:80" ; } ];
|
||||
servers = [ { url = "http://192.168.1.114:80"; } ];
|
||||
};
|
||||
"crafty".loadBalancer = {
|
||||
servers = [ { url = "https://192.168.1.34:8443" ; } ];
|
||||
servers = [ { url = "https://192.168.1.34:8443"; } ];
|
||||
};
|
||||
"cyberchef".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.197:6900" ; } ];
|
||||
servers = [ { url = "http://192.168.1.197:6900"; } ];
|
||||
};
|
||||
"gitea".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.28:3000" ; } ];
|
||||
servers = [ { url = "http://192.168.1.28:3000"; } ];
|
||||
};
|
||||
"jellyfin".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.147:8096" ; } ];
|
||||
servers = [ { url = "http://192.168.1.147:8096"; } ];
|
||||
};
|
||||
"kuma".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.176:80" ; } ];
|
||||
servers = [ { url = "http://192.168.1.176:80"; } ];
|
||||
};
|
||||
"kutt".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.132:80" ; } ];
|
||||
servers = [ { url = "http://192.168.1.132:80"; } ];
|
||||
};
|
||||
"matrix".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.114:80" ; } ];
|
||||
servers = [ { url = "http://192.168.1.114:80"; } ];
|
||||
};
|
||||
"mirror".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.185:80" ; } ];
|
||||
servers = [ { url = "http://192.168.1.185:80"; } ];
|
||||
};
|
||||
"ombi-anime".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.147:3580" ; } ];
|
||||
servers = [ { url = "http://192.168.1.147:3580"; } ];
|
||||
};
|
||||
"ombi".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.147:3579" ; } ];
|
||||
servers = [ { url = "http://192.168.1.147:3579"; } ];
|
||||
};
|
||||
"share".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.98:80" ; } ];
|
||||
servers = [ { url = "http://192.168.1.98:80"; } ];
|
||||
};
|
||||
"vault".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.160:80" ; } ];
|
||||
servers = [ { url = "http://192.168.1.160:80"; } ];
|
||||
};
|
||||
"wordpress".loadBalancer = {
|
||||
servers = [ { url = "http://192.168.1.16:80" ; } ];
|
||||
servers = [ { url = "http://192.168.1.16:80"; } ];
|
||||
};
|
||||
"mail".loadBalancer = {
|
||||
servers = [ { url = "https://192.168.1.128:443" ; } ];
|
||||
servers = [ { url = "https://192.168.1.128:443"; } ];
|
||||
};
|
||||
};
|
||||
serversTransports = {
|
||||
@ -360,7 +412,7 @@ in
|
||||
serverName = "srv2-proxmox.internal.smayzy.ovh";
|
||||
};
|
||||
};
|
||||
middlewares ={
|
||||
middlewares = {
|
||||
dashboard-auth = {
|
||||
basicAuth = {
|
||||
usersFile = "/run/secrets/traefik-dashboard-auth";
|
||||
|
||||
@ -23,7 +23,9 @@ in
|
||||
privateNetwork = true;
|
||||
hostBridge = net.bridge;
|
||||
localAddress = cfg.ip;
|
||||
config = { ... }: {
|
||||
config =
|
||||
{ ... }:
|
||||
{
|
||||
system.stateVersion = "25.11";
|
||||
|
||||
services.unbound = {
|
||||
|
||||
@ -1,4 +1,9 @@
|
||||
{ lib, pkgs, config, ... }:
|
||||
{
|
||||
lib,
|
||||
pkgs,
|
||||
config,
|
||||
...
|
||||
}:
|
||||
let
|
||||
inherit (lib) mkIf mkOption types;
|
||||
in
|
||||
|
||||
Loading…
Reference in New Issue
Block a user