kalipso
d8d910f5fd
All checks were successful
Evaluate Hydra Jobs / eval-hydra-jobs (push) Successful in 4m7s
after thinking about it it makes no sense to have status/alerting running on fanny. as soon as fanny fails we wont get any alerts anymore. thats why i think having it running on the hetzner server, which is quite stable, makes sense
46 lines
832 B
Nix
46 lines
832 B
Nix
{ config, lib, pkgs, inputs, ... }:
|
|
|
|
with lib;
|
|
|
|
{
|
|
sops.defaultSopsFile = ./secrets.yaml;
|
|
sops.secrets.wg_private = {};
|
|
|
|
networking = {
|
|
hostName = mkDefault "vpn";
|
|
useDHCP = false;
|
|
nameservers = [ "1.1.1.1" ];
|
|
firewall = {
|
|
allowedUDPPorts = [ 51821 ];
|
|
allowedTCPPorts = [ 80 ];
|
|
};
|
|
};
|
|
|
|
imports = [
|
|
../modules/malobeo_user.nix
|
|
../modules/sshd.nix
|
|
../modules/minimal_tools.nix
|
|
];
|
|
|
|
services.malobeo.vpn = {
|
|
enable = true;
|
|
name = "vpn";
|
|
privateKeyFile = config.sops.secrets.wg_private.path;
|
|
};
|
|
|
|
services.nginx = {
|
|
enable = true;
|
|
virtualHosts."docs.malobeo.org" = {
|
|
locations."/" = {
|
|
proxyPass = "http://10.100.0.101";
|
|
extraConfig = ''
|
|
'';
|
|
};
|
|
|
|
};
|
|
};
|
|
|
|
system.stateVersion = "22.11"; # Did you read the comment?
|
|
}
|
|
|