Compare commits
20
Commits
8ac2555aac
...
master
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
2d97936dbb | ||
|
|
65aa448896 | ||
|
|
6f4bfefd72 | ||
|
|
9edba85b1d | ||
|
|
5bf4d98da2 | ||
|
|
ca139ded2f | ||
|
|
0b41100bc2 | ||
|
|
042634b75a | ||
|
|
8e4968b947 | ||
|
|
468eae711c | ||
|
|
5be7c14640 | ||
|
|
aba378e3c1 | ||
|
|
e9b3caebdc | ||
|
|
294d6816e7 | ||
|
|
c6cc36e28f | ||
|
|
28acea2eb1 | ||
|
|
14cb1b2b4b | ||
|
|
e6ed692174 | ||
|
|
1713298915 | ||
|
|
f153e57190 |
@@ -211,7 +211,7 @@ hl.config({
|
|||||||
kb_layout = "us",
|
kb_layout = "us",
|
||||||
kb_variant = "",
|
kb_variant = "",
|
||||||
kb_model = "",
|
kb_model = "",
|
||||||
kb_options = "caps:swapescape",
|
kb_options = "",
|
||||||
kb_rules = "",
|
kb_rules = "",
|
||||||
|
|
||||||
follow_mouse = 1,
|
follow_mouse = 1,
|
||||||
|
|||||||
@@ -18,6 +18,13 @@ require("lazy").setup({
|
|||||||
spec = {
|
spec = {
|
||||||
-- add LazyVim and import its plugins
|
-- add LazyVim and import its plugins
|
||||||
{ "LazyVim/LazyVim", import = "lazyvim.plugins" },
|
{ "LazyVim/LazyVim", import = "lazyvim.plugins" },
|
||||||
|
{ import = "lazyvim.plugins.extras.lang.python" },
|
||||||
|
{ import = "lazyvim.plugins.extras.lang.typescript" },
|
||||||
|
{ import = "lazyvim.plugins.extras.lang.php" },
|
||||||
|
{ import = "lazyvim.plugins.extras.lang.rust" },
|
||||||
|
{ import = "lazyvim.plugins.extras.lang.nix" },
|
||||||
|
{ import = "lazyvim.plugins.extras.lang.json" },
|
||||||
|
{ import = "lazyvim.plugins.extras.lang.docker" },
|
||||||
-- import/override with your plugins
|
-- import/override with your plugins
|
||||||
{ import = "plugins" },
|
{ import = "plugins" },
|
||||||
},
|
},
|
||||||
|
|||||||
@@ -1,3 +1,5 @@
|
|||||||
-- Options are automatically loaded before lazy.nvim startup
|
-- Options are automatically loaded before lazy.nvim startup
|
||||||
-- Default options that are always set: https://github.com/LazyVim/LazyVim/blob/main/lua/lazyvim/config/options.lua
|
-- Default options that are always set: https://github.com/LazyVim/LazyVim/blob/main/lua/lazyvim/config/options.lua
|
||||||
-- Add any additional options here
|
-- Add any additional options here
|
||||||
|
--
|
||||||
|
vim.g.lazyvim_python_lsp = "basedpyright"
|
||||||
|
|||||||
@@ -1,10 +0,0 @@
|
|||||||
return {
|
|
||||||
"stevearc/conform.nvim",
|
|
||||||
opts = {
|
|
||||||
formatters_by_ft = {
|
|
||||||
nix = {
|
|
||||||
"alejandra",
|
|
||||||
},
|
|
||||||
},
|
|
||||||
},
|
|
||||||
}
|
|
||||||
@@ -0,0 +1,16 @@
|
|||||||
|
return {
|
||||||
|
"neovim/nvim-lspconfig",
|
||||||
|
opts = {
|
||||||
|
servers = {
|
||||||
|
lua_ls = {
|
||||||
|
settings = {
|
||||||
|
Lua = {
|
||||||
|
diagnostics = {
|
||||||
|
globals = { "hl", "vim" },
|
||||||
|
},
|
||||||
|
},
|
||||||
|
},
|
||||||
|
},
|
||||||
|
},
|
||||||
|
},
|
||||||
|
}
|
||||||
@@ -0,0 +1,4 @@
|
|||||||
|
return {
|
||||||
|
{ "williamboman/mason-lspconfig", enabled = false },
|
||||||
|
{ "williamboman/mason", enabled = false },
|
||||||
|
}
|
||||||
Generated
+36
-21
@@ -26,22 +26,21 @@
|
|||||||
"configarr": {
|
"configarr": {
|
||||||
"inputs": {
|
"inputs": {
|
||||||
"flake-parts": "flake-parts",
|
"flake-parts": "flake-parts",
|
||||||
"nixpkgs": [
|
"nixpkgs": "nixpkgs",
|
||||||
"configarr"
|
|
||||||
],
|
|
||||||
"systems": "systems"
|
"systems": "systems"
|
||||||
},
|
},
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1789671926,
|
"lastModified": 1789645849,
|
||||||
"narHash": "sha256-SYmuoortHANADEwaCo4aedvWg6QcJhm9cWSIQ4y6gFw=",
|
"narHash": "sha256-cK6OX+BjeT2cl7NEi+cL8qBWtPEKtfV4IZyIIUWtYII=",
|
||||||
"owner": "raydak-labs",
|
"owner": "raydak-labs",
|
||||||
"repo": "configarr",
|
"repo": "configarr",
|
||||||
"rev": "c9058492b390e54478ad1f4d7c35170041b5db3b",
|
"rev": "44fef304c1abd63cc28b32bec6bcb42950a51586",
|
||||||
"type": "github"
|
"type": "github"
|
||||||
},
|
},
|
||||||
"original": {
|
"original": {
|
||||||
"owner": "raydak-labs",
|
"owner": "raydak-labs",
|
||||||
"repo": "configarr",
|
"repo": "configarr",
|
||||||
|
"rev": "44fef304c1abd63cc28b32bec6bcb42950a51586",
|
||||||
"type": "github"
|
"type": "github"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
@@ -142,11 +141,11 @@
|
|||||||
]
|
]
|
||||||
},
|
},
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1790365885,
|
"lastModified": 1791227480,
|
||||||
"narHash": "sha256-iQ0ebhiVo64NktTnwft9hNxlFu4j5cvljVxyJaEVIP4=",
|
"narHash": "sha256-+lrD+sxc2RKUWXRBAcggn7uBCFeJgnV75jD/cz7gJRA=",
|
||||||
"owner": "nix-community",
|
"owner": "nix-community",
|
||||||
"repo": "home-manager",
|
"repo": "home-manager",
|
||||||
"rev": "7b4c5ec4bedaf1e062bbc1bcaeddbc6bd242aa1b",
|
"rev": "aa23f720d022187228bc264f759aef6b80233bcf",
|
||||||
"type": "github"
|
"type": "github"
|
||||||
},
|
},
|
||||||
"original": {
|
"original": {
|
||||||
@@ -158,7 +157,7 @@
|
|||||||
"lazyvim": {
|
"lazyvim": {
|
||||||
"inputs": {
|
"inputs": {
|
||||||
"flake-utils": "flake-utils",
|
"flake-utils": "flake-utils",
|
||||||
"nixpkgs": "nixpkgs"
|
"nixpkgs": "nixpkgs_2"
|
||||||
},
|
},
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1788971242,
|
"lastModified": 1788971242,
|
||||||
@@ -198,16 +197,16 @@
|
|||||||
},
|
},
|
||||||
"nixpkgs": {
|
"nixpkgs": {
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1752480373,
|
"lastModified": 1784783405,
|
||||||
"narHash": "sha256-JHQbm+OcGp32wAsXTE/FLYGNpb+4GLi5oTvCxwSoBOA=",
|
"narHash": "sha256-4IHyyLgLBdKefkljdKod4IMn023pQiDXAWJA187cmdY=",
|
||||||
"owner": "NixOS",
|
"owner": "NixOS",
|
||||||
"repo": "nixpkgs",
|
"repo": "nixpkgs",
|
||||||
"rev": "62e0f05ede1da0d54515d4ea8ce9c733f12d9f08",
|
"rev": "7525d999cd850b9a488817abc89c75dc733acf17",
|
||||||
"type": "github"
|
"type": "github"
|
||||||
},
|
},
|
||||||
"original": {
|
"original": {
|
||||||
"owner": "NixOS",
|
"owner": "NixOS",
|
||||||
"ref": "nixos-unstable",
|
"ref": "nixpkgs-unstable",
|
||||||
"repo": "nixpkgs",
|
"repo": "nixpkgs",
|
||||||
"type": "github"
|
"type": "github"
|
||||||
}
|
}
|
||||||
@@ -229,11 +228,27 @@
|
|||||||
},
|
},
|
||||||
"nixpkgs_2": {
|
"nixpkgs_2": {
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1790578696,
|
"lastModified": 1752480373,
|
||||||
"narHash": "sha256-ZoxIApko70jCdbH3l20HWXOBaT2HZd87orzd2yJ9dVE=",
|
"narHash": "sha256-JHQbm+OcGp32wAsXTE/FLYGNpb+4GLi5oTvCxwSoBOA=",
|
||||||
"owner": "NixOS",
|
"owner": "NixOS",
|
||||||
"repo": "nixpkgs",
|
"repo": "nixpkgs",
|
||||||
"rev": "7a0f122f5090cf4c2ade2a13a0e229d4e19ba71f",
|
"rev": "62e0f05ede1da0d54515d4ea8ce9c733f12d9f08",
|
||||||
|
"type": "github"
|
||||||
|
},
|
||||||
|
"original": {
|
||||||
|
"owner": "NixOS",
|
||||||
|
"ref": "nixos-unstable",
|
||||||
|
"repo": "nixpkgs",
|
||||||
|
"type": "github"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"nixpkgs_3": {
|
||||||
|
"locked": {
|
||||||
|
"lastModified": 1791260994,
|
||||||
|
"narHash": "sha256-Miqqk/ammqnTUxaoCyvtwoPeLbI1ksFyLxi/CazZpWY=",
|
||||||
|
"owner": "NixOS",
|
||||||
|
"repo": "nixpkgs",
|
||||||
|
"rev": "151fa4e8ddfdd8dd25d945ad94ed54a13de9f6e4",
|
||||||
"type": "github"
|
"type": "github"
|
||||||
},
|
},
|
||||||
"original": {
|
"original": {
|
||||||
@@ -250,7 +265,7 @@
|
|||||||
"home-manager": "home-manager",
|
"home-manager": "home-manager",
|
||||||
"lazyvim": "lazyvim",
|
"lazyvim": "lazyvim",
|
||||||
"nixos-wsl": "nixos-wsl",
|
"nixos-wsl": "nixos-wsl",
|
||||||
"nixpkgs": "nixpkgs_2",
|
"nixpkgs": "nixpkgs_3",
|
||||||
"sops-nix": "sops-nix"
|
"sops-nix": "sops-nix"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
@@ -278,11 +293,11 @@
|
|||||||
]
|
]
|
||||||
},
|
},
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1790498116,
|
"lastModified": 1791103873,
|
||||||
"narHash": "sha256-rs9meAYxW3zzrh43yaW7htrqCD+X9+pupDPHN86fumI=",
|
"narHash": "sha256-nFxM+pKoZ8LJAEnUXARyCaOAloWgaW9kZQOSjWzKcTE=",
|
||||||
"owner": "Mic92",
|
"owner": "Mic92",
|
||||||
"repo": "sops-nix",
|
"repo": "sops-nix",
|
||||||
"rev": "5efb5a6f4f5ab192817d28557dd4d650fa14d866",
|
"rev": "dcd241ba97088c22569d1573286e1b9daad340c0",
|
||||||
"type": "github"
|
"type": "github"
|
||||||
},
|
},
|
||||||
"original": {
|
"original": {
|
||||||
|
|||||||
@@ -19,6 +19,10 @@
|
|||||||
inputs.nixpkgs.follows = "nixpkgs";
|
inputs.nixpkgs.follows = "nixpkgs";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
configarr = {
|
||||||
|
url = "github:raydak-labs/configarr/44fef304c1abd63cc28b32bec6bcb42950a51586";
|
||||||
|
};
|
||||||
|
|
||||||
alejandra.url = "github:kamadorueda/alejandra/4.0.0";
|
alejandra.url = "github:kamadorueda/alejandra/4.0.0";
|
||||||
alejandra.inputs.nixpkgs.follows = "nixpkgs";
|
alejandra.inputs.nixpkgs.follows = "nixpkgs";
|
||||||
|
|
||||||
@@ -29,6 +33,7 @@
|
|||||||
self,
|
self,
|
||||||
nixpkgs,
|
nixpkgs,
|
||||||
sops-nix,
|
sops-nix,
|
||||||
|
configarr,
|
||||||
lazyvim,
|
lazyvim,
|
||||||
alejandra,
|
alejandra,
|
||||||
...
|
...
|
||||||
@@ -49,6 +54,8 @@
|
|||||||
{
|
{
|
||||||
environment.systemPackages = [alejandra.defaultPackage.${system}];
|
environment.systemPackages = [alejandra.defaultPackage.${system}];
|
||||||
}
|
}
|
||||||
|
configarr.nixosModules.default
|
||||||
|
|
||||||
{
|
{
|
||||||
home-manager.useGlobalPkgs = true;
|
home-manager.useGlobalPkgs = true;
|
||||||
home-manager.useUserPackages = true;
|
home-manager.useUserPackages = true;
|
||||||
@@ -59,6 +66,7 @@
|
|||||||
];
|
];
|
||||||
home-manager.users.mask = homeFile;
|
home-manager.users.mask = homeFile;
|
||||||
}
|
}
|
||||||
|
|
||||||
inputs.sops-nix.nixosModules.sops
|
inputs.sops-nix.nixosModules.sops
|
||||||
]
|
]
|
||||||
++ extraModules;
|
++ extraModules;
|
||||||
|
|||||||
+10
-2
@@ -23,6 +23,8 @@
|
|||||||
home.packages = with pkgs; [
|
home.packages = with pkgs; [
|
||||||
fish
|
fish
|
||||||
alacritty
|
alacritty
|
||||||
|
starship
|
||||||
|
yazi
|
||||||
# # It is sometimes useful to fine-tune packages, for example, by applying
|
# # It is sometimes useful to fine-tune packages, for example, by applying
|
||||||
# # overrides. You can do that directly here, just don't forget the
|
# # overrides. You can do that directly here, just don't forget the
|
||||||
# # parentheses. Maybe you want to install Nerd Fonts with a limited number of
|
# # parentheses. Maybe you want to install Nerd Fonts with a limited number of
|
||||||
@@ -41,6 +43,10 @@
|
|||||||
# plain files is through 'home.file'.
|
# plain files is through 'home.file'.
|
||||||
home.file = {
|
home.file = {
|
||||||
".config/nvim".source = ../dotfiles/nvim;
|
".config/nvim".source = ../dotfiles/nvim;
|
||||||
|
".config/nvim/lazy-lock.json" = {
|
||||||
|
text = "{}";
|
||||||
|
onChange = "";
|
||||||
|
};
|
||||||
".config/hypr".source = ../dotfiles/hypr;
|
".config/hypr".source = ../dotfiles/hypr;
|
||||||
# # Building this configuration will create a copy of 'dotfiles/screenrc' in
|
# # Building this configuration will create a copy of 'dotfiles/screenrc' in
|
||||||
# # the Nix store. Activating the configuration will then make '~/.screenrc' a
|
# # the Nix store. Activating the configuration will then make '~/.screenrc' a
|
||||||
@@ -78,7 +84,6 @@
|
|||||||
dogma-rebuild-rtx = "sudo nixos-rebuild switch --flake ${config.home.homeDirectory}#dogma-nixos-rtx";
|
dogma-rebuild-rtx = "sudo nixos-rebuild switch --flake ${config.home.homeDirectory}#dogma-nixos-rtx";
|
||||||
dogma-rebuild-wsl = "sudo nixos-rebuild switch --flake ${config.home.homeDirectory}#dogma-wsl";
|
dogma-rebuild-wsl = "sudo nixos-rebuild switch --flake ${config.home.homeDirectory}#dogma-wsl";
|
||||||
cdproj = "cd ${config.home.homeDirectory}/projects/nixos-dogma";
|
cdproj = "cd ${config.home.homeDirectory}/projects/nixos-dogma";
|
||||||
working = "echo aaa";
|
|
||||||
};
|
};
|
||||||
|
|
||||||
# Home Manager can also manage your environment variables through
|
# Home Manager can also manage your environment variables through
|
||||||
@@ -169,11 +174,14 @@
|
|||||||
gnumake
|
gnumake
|
||||||
unzip
|
unzip
|
||||||
wget
|
wget
|
||||||
nil
|
|
||||||
statix
|
statix
|
||||||
lazygit
|
lazygit
|
||||||
luarocks
|
luarocks
|
||||||
nil
|
nil
|
||||||
|
fzf
|
||||||
|
basedpyright
|
||||||
|
ruff
|
||||||
|
vtsls
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|||||||
@@ -34,6 +34,10 @@
|
|||||||
"dedyn/dnsuser" = {};
|
"dedyn/dnsuser" = {};
|
||||||
"github/token" = {};
|
"github/token" = {};
|
||||||
"gitlab/token" = {};
|
"gitlab/token" = {};
|
||||||
|
"sonarr/apikey" = {};
|
||||||
|
"cifs/user" = {};
|
||||||
|
"cifs/password" = {};
|
||||||
|
"radarr/apikey" = {};
|
||||||
"mongodb/initial_password" = {};
|
"mongodb/initial_password" = {};
|
||||||
"namecheap/ddyn_password" = {
|
"namecheap/ddyn_password" = {
|
||||||
restartUnits = ["ddclient.service"];
|
restartUnits = ["ddclient.service"];
|
||||||
@@ -49,6 +53,11 @@
|
|||||||
};
|
};
|
||||||
sops.templates."duplicity.env".content = builtins.toJSON {};
|
sops.templates."duplicity.env".content = builtins.toJSON {};
|
||||||
|
|
||||||
|
sops.templates."cifs-credentials".content = ''
|
||||||
|
username=${config.sops.placeholder."cifs/user"};
|
||||||
|
password=${config.sops.placeholder."cifs/password"};
|
||||||
|
'';
|
||||||
|
|
||||||
sops.templates."caddy.env" = {
|
sops.templates."caddy.env" = {
|
||||||
owner = "root";
|
owner = "root";
|
||||||
mode = "0600";
|
mode = "0600";
|
||||||
@@ -84,6 +93,8 @@
|
|||||||
zstd
|
zstd
|
||||||
stdenv.cc.cc
|
stdenv.cc.cc
|
||||||
curl
|
curl
|
||||||
|
SDL2
|
||||||
|
wayland
|
||||||
openssl
|
openssl
|
||||||
libssh
|
libssh
|
||||||
bzip2
|
bzip2
|
||||||
@@ -98,6 +109,7 @@
|
|||||||
|
|
||||||
environment.systemPackages = with pkgs; [
|
environment.systemPackages = with pkgs; [
|
||||||
inotify-tools
|
inotify-tools
|
||||||
|
uv
|
||||||
opencode
|
opencode
|
||||||
steam
|
steam
|
||||||
nnn
|
nnn
|
||||||
@@ -161,5 +173,23 @@
|
|||||||
|
|
||||||
services.openssh.enable = true;
|
services.openssh.enable = true;
|
||||||
|
|
||||||
|
services.keyd = {
|
||||||
|
enable = true;
|
||||||
|
keyboards = {
|
||||||
|
default = {
|
||||||
|
ids = ["*"];
|
||||||
|
settings = {
|
||||||
|
main = {
|
||||||
|
# Tap for Escape, hold for Control
|
||||||
|
capslock = "overload(control, escape)";
|
||||||
|
|
||||||
|
# OR Tap for Escape, hold for Super/Meta:
|
||||||
|
# capslock = "overload(meta, escape)";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
system.stateVersion = "25.11";
|
system.stateVersion = "25.11";
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -9,12 +9,26 @@
|
|||||||
|
|
||||||
services.xserver.enable = true;
|
services.xserver.enable = true;
|
||||||
services.xserver.xkb.layout = "us";
|
services.xserver.xkb.layout = "us";
|
||||||
services.xserver.xkb.options = "caps:escape";
|
|
||||||
services.xserver.displayManager.lightdm.autoLogin.timeout = 1;
|
services.xserver.displayManager.lightdm.autoLogin.timeout = 1;
|
||||||
|
|
||||||
|
hardware.graphics = {
|
||||||
|
enable = true;
|
||||||
|
extraPackages = [pkgs.mesa];
|
||||||
|
};
|
||||||
|
|
||||||
|
hardware.opengl = {
|
||||||
|
enable = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
environment.sessionVariables = {
|
||||||
|
NIXOS_OZONE_WL = "1";
|
||||||
|
};
|
||||||
|
|
||||||
services.pipewire = {
|
services.pipewire = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
alsa.enable = true;
|
||||||
pulse.enable = true;
|
pulse.enable = true;
|
||||||
|
wireplumber.enable = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
services.sunshine = {
|
services.sunshine = {
|
||||||
@@ -24,7 +38,20 @@
|
|||||||
openFirewall = true;
|
openFirewall = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
programs.hyprland.enable = true;
|
programs.hyprland = {
|
||||||
|
enable = true;
|
||||||
|
xwayland.enable = true;
|
||||||
|
};
|
||||||
|
xdg.portal = {
|
||||||
|
enable = true;
|
||||||
|
extraPortals = with pkgs; [
|
||||||
|
xdg-desktop-portal
|
||||||
|
xdg-desktop-portal-gtk
|
||||||
|
xdg-desktop-portal-hyprland
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
services.getty.autologinUser = "mask";
|
||||||
|
|
||||||
virtualisation.libvirtd = {
|
virtualisation.libvirtd = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|||||||
+95
-6
@@ -3,6 +3,8 @@
|
|||||||
config,
|
config,
|
||||||
lib,
|
lib,
|
||||||
pkgs,
|
pkgs,
|
||||||
|
inputs,
|
||||||
|
options,
|
||||||
...
|
...
|
||||||
}: {
|
}: {
|
||||||
boot.kernel.sysctl = {
|
boot.kernel.sysctl = {
|
||||||
@@ -24,27 +26,36 @@
|
|||||||
services.caddy = {
|
services.caddy = {
|
||||||
enable = true;
|
enable = true;
|
||||||
environmentFile = config.sops.templates."caddy.env".path;
|
environmentFile = config.sops.templates."caddy.env".path;
|
||||||
|
|
||||||
virtualHosts."centraldogma.site:".extraConfig = ''
|
virtualHosts."centraldogma.site:".extraConfig = ''
|
||||||
|
|
||||||
root /srv/root/
|
root /srv/root/
|
||||||
|
|
||||||
file_server
|
file_server
|
||||||
encode zstd gzip
|
encode zstd gzip
|
||||||
|
|
||||||
redir /jellyfin /jellyfin/
|
|
||||||
reverse_proxy /jellyfin/* 127.0.0.1:8096
|
|
||||||
|
|
||||||
|
|
||||||
redir /radarr /radarr/
|
redir /radarr /radarr/
|
||||||
reverse_proxy /radarr/* 127.0.0.1:7878
|
reverse_proxy /radarr/* 127.0.0.1:7878
|
||||||
|
|
||||||
'';
|
'';
|
||||||
|
virtualHosts."http://dogma.lan:".extraConfig = ''
|
||||||
|
root * /srv/root/
|
||||||
|
file_server browse
|
||||||
|
encode zstd gzip
|
||||||
|
'';
|
||||||
virtualHosts."jellyfin.centraldogma.site:".extraConfig = ''
|
virtualHosts."jellyfin.centraldogma.site:".extraConfig = ''
|
||||||
reverse_proxy /* 127.0.0.1:8096
|
reverse_proxy /* 127.0.0.1:8096
|
||||||
'';
|
'';
|
||||||
virtualHosts."jellyfin2.centraldogma.site:".extraConfig = ''
|
|
||||||
|
virtualHosts."sonarr.centraldogma.site:".extraConfig = ''
|
||||||
redir /sonarr /sonarr/
|
redir /sonarr /sonarr/
|
||||||
reverse_proxy /sonarr/* 127.0.0.1:8989
|
reverse_proxy /sonarr/* 127.0.0.1:8989
|
||||||
'';
|
'';
|
||||||
|
|
||||||
|
virtualHosts."radarr.centraldogma.site:".extraConfig = ''
|
||||||
|
redir /radarr /radarr/
|
||||||
|
reverse_proxy /radarr/* 127.0.0.1:7878
|
||||||
|
'';
|
||||||
virtualHosts."git.centraldogma.site:".extraConfig = ''
|
virtualHosts."git.centraldogma.site:".extraConfig = ''
|
||||||
reverse_proxy /* 127.0.0.1:3000
|
reverse_proxy /* 127.0.0.1:3000
|
||||||
'';
|
'';
|
||||||
@@ -52,12 +63,90 @@
|
|||||||
|
|
||||||
services.flaresolverr.enable = true;
|
services.flaresolverr.enable = true;
|
||||||
|
|
||||||
|
sops.templates.configarr-ev = {
|
||||||
|
content = ''
|
||||||
|
LOG_LEVEL=debug
|
||||||
|
LOG_STACKTRACE=true
|
||||||
|
CONFIGARR_ENABLE_MERGE=true
|
||||||
|
RADARR_API_KEY=${config.sops.placeholder."radarr/apikey"}
|
||||||
|
SONARR_API_KEY=${config.sops.placeholder."sonarr/apikey"}
|
||||||
|
'';
|
||||||
|
inherit (config.services.configarr) group;
|
||||||
|
owner = config.services.configarr.user;
|
||||||
|
};
|
||||||
|
|
||||||
|
services.configarr = {
|
||||||
|
package =
|
||||||
|
options.services.configarr.package.default.overrideAttrs
|
||||||
|
(old: {
|
||||||
|
pnpmDeps = old.pnpmDeps.overrideAttrs (_: {
|
||||||
|
outputHash = "sha256-auz4JyfHJAOF+baLfV391HgBTua4AJFfX4CtTPh+0Sw=";
|
||||||
|
});
|
||||||
|
});
|
||||||
|
enable = true;
|
||||||
|
config =
|
||||||
|
#yaml
|
||||||
|
''
|
||||||
|
x-download-clients:
|
||||||
|
# Define an anchor for shared instance
|
||||||
|
qb_base: &qb_base
|
||||||
|
name: "qBit"
|
||||||
|
type: qbittorrent
|
||||||
|
enable: true
|
||||||
|
priority: 1
|
||||||
|
remove_completed_downloads: true
|
||||||
|
remove_failed_downloads: true
|
||||||
|
# YAML does a shallow merge, thus we must declare another anchor for the nested dictionary if we plan to override values in it
|
||||||
|
fields: &qb_fields
|
||||||
|
host: qbittorrent
|
||||||
|
port: 8080
|
||||||
|
use_ssl: false
|
||||||
|
username: admin
|
||||||
|
password: changeme
|
||||||
|
|
||||||
|
radarr:
|
||||||
|
radarr_instance:
|
||||||
|
api_key: !env RADARR_API_KEY
|
||||||
|
base_url: http://localhost:${toString config.services.radarr.settings.server.port}
|
||||||
|
|
||||||
|
sonarr:
|
||||||
|
sonarr_instance:
|
||||||
|
api_key: !env SONARR_API_KEY
|
||||||
|
base_url: http://localhost:${toString config.services.sonarr.settings.server.port}
|
||||||
|
download_clients:
|
||||||
|
data:
|
||||||
|
- <<: *qb_base
|
||||||
|
fields:
|
||||||
|
<<: *qb_fields
|
||||||
|
tv_category: series
|
||||||
|
tags: ["sonarr"]
|
||||||
|
# Reuse same base, override name and fields
|
||||||
|
- <<: *qb_base
|
||||||
|
name: "qBit 4K"
|
||||||
|
fields:
|
||||||
|
<<: *qb_fields
|
||||||
|
tv_category: series-4k
|
||||||
|
tags: ["4K"]
|
||||||
|
update_password: false
|
||||||
|
delete_unmanaged:
|
||||||
|
enabled: true
|
||||||
|
ignore: ["Manual Test Client"]
|
||||||
|
config:
|
||||||
|
enable_completed_download_handling: true
|
||||||
|
auto_redownload_failed: false
|
||||||
|
|
||||||
|
|
||||||
|
'';
|
||||||
|
environmentFile = config.sops.templates."configarr-ev".path;
|
||||||
|
};
|
||||||
|
|
||||||
services.mongodb = {
|
services.mongodb = {
|
||||||
enable = true;
|
enable = true;
|
||||||
package = pkgs.mongodb-ce;
|
package = pkgs.mongodb-ce;
|
||||||
initialRootPasswordFile = config.sops.secrets."mongodb/initial_password".path;
|
initialRootPasswordFile = config.sops.secrets."mongodb/initial_password".path;
|
||||||
};
|
};
|
||||||
services.jackett.enable = true;
|
services.jackett.enable = true;
|
||||||
|
services.prowlarr.enable = true;
|
||||||
|
|
||||||
services.factorio = {
|
services.factorio = {
|
||||||
enable = true;
|
enable = true;
|
||||||
@@ -97,7 +186,7 @@
|
|||||||
openRPCPort = true;
|
openRPCPort = true;
|
||||||
settings = {
|
settings = {
|
||||||
rpc-bind-address = "0.0.0.0";
|
rpc-bind-address = "0.0.0.0";
|
||||||
rpc-whitelist = "127.0.0.1,192.168.1.86";
|
rpc-whitelist = "127.0.0.1,192.168.0.91";
|
||||||
download-dir = "/mnt/media/Downloads";
|
download-dir = "/mnt/media/Downloads";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|||||||
@@ -1,4 +1,4 @@
|
|||||||
{
|
{config, ...}: {
|
||||||
fileSystems = {
|
fileSystems = {
|
||||||
"/mnt/games" = {
|
"/mnt/games" = {
|
||||||
device = "/dev/disk/by-uuid/969eb1a0-fb99-46d1-96cf-57a8644ee2d1";
|
device = "/dev/disk/by-uuid/969eb1a0-fb99-46d1-96cf-57a8644ee2d1";
|
||||||
@@ -10,6 +10,7 @@
|
|||||||
"nofail"
|
"nofail"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
"/mnt/photo" = {
|
"/mnt/photo" = {
|
||||||
device = "/dev/disk/by-uuid/969eb1a0-fb99-46d1-96cf-57a8644ee2d1";
|
device = "/dev/disk/by-uuid/969eb1a0-fb99-46d1-96cf-57a8644ee2d1";
|
||||||
fsType = "btrfs";
|
fsType = "btrfs";
|
||||||
@@ -43,6 +44,15 @@
|
|||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# "/mnt/dogma-rtx-public" = {
|
||||||
|
# device = "//192.168.0.93/Users/Public";
|
||||||
|
# fsType = "cifs";
|
||||||
|
# options = let
|
||||||
|
# # Prevent system hangs if the network drops or the NAS is offline
|
||||||
|
# automount_opts = "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s";
|
||||||
|
# in ["${automount_opts},credentials=${config.sops.templates."cifs-credentials".path},uid=1000,gid=100" "nofail"];
|
||||||
|
# };
|
||||||
|
|
||||||
"/mnt/winhdd" = {
|
"/mnt/winhdd" = {
|
||||||
device = "/dev/sdb1";
|
device = "/dev/sdb1";
|
||||||
fsType = "ntfs";
|
fsType = "ntfs";
|
||||||
|
|||||||
@@ -1,4 +1,8 @@
|
|||||||
{pkgs, ...}: {
|
{
|
||||||
|
pkgs,
|
||||||
|
config,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
services.samba = {
|
services.samba = {
|
||||||
enable = true;
|
enable = true;
|
||||||
openFirewall = true;
|
openFirewall = true;
|
||||||
@@ -11,7 +15,7 @@
|
|||||||
#"use sendfile" = "yes";
|
#"use sendfile" = "yes";
|
||||||
#"max protocol" = "smb2";
|
#"max protocol" = "smb2";
|
||||||
# note: localhost is the ipv6 localhost ::1
|
# note: localhost is the ipv6 localhost ::1
|
||||||
"hosts allow" = "192.168.1.1/24 127.0.0.1 localhost";
|
"hosts allow" = "192.168.0.1/24 127.0.0.1 localhost";
|
||||||
"guest account" = "nobody";
|
"guest account" = "nobody";
|
||||||
"map to guest" = "bad user";
|
"map to guest" = "bad user";
|
||||||
};
|
};
|
||||||
|
|||||||
+12
-2
@@ -31,11 +31,18 @@ gitea:
|
|||||||
caddy:
|
caddy:
|
||||||
acme_email: ENC[AES256_GCM,data:TpXEvreBkq2gqpq3OTokke/Zues=,iv:iO8jIMEzBpk5DOksQqnT87Nq8vFTG28qELvfIscOqWc=,tag:poK3Kl1bkePLetSF5DPb9A==,type:str]
|
acme_email: ENC[AES256_GCM,data:TpXEvreBkq2gqpq3OTokke/Zues=,iv:iO8jIMEzBpk5DOksQqnT87Nq8vFTG28qELvfIscOqWc=,tag:poK3Kl1bkePLetSF5DPb9A==,type:str]
|
||||||
gitea_password: ENC[AES256_GCM,data:Qtp9wKXS5EwcK9vZOb8unc98Ptif6ox5xClNxKy7/rhdE0kU6sjRpMq675w=,iv:1QmjDt/89zuWAtkTqzApJ8/VW//i4h/+SlAfhguYN88=,tag:vzSA5PEjuad2QO8w1qcigA==,type:str]
|
gitea_password: ENC[AES256_GCM,data:Qtp9wKXS5EwcK9vZOb8unc98Ptif6ox5xClNxKy7/rhdE0kU6sjRpMq675w=,iv:1QmjDt/89zuWAtkTqzApJ8/VW//i4h/+SlAfhguYN88=,tag:vzSA5PEjuad2QO8w1qcigA==,type:str]
|
||||||
|
realname: ENC[AES256_GCM,data:5EtmFg2ZbM6fPwyK1X/+aF1Z4UGL,iv:a8v05Gt+eABECBxmh7quVYgDrMmDrj/3fhfGdHZPC+k=,tag:Ip9csJr85k5RQcadccn81w==,type:str]
|
||||||
google:
|
google:
|
||||||
gmail: ENC[AES256_GCM,data:WwDdjZx5TuJcsVdasWaEw0c=,iv:3HftLdrT12DB/DyPy4g20FbYRAhNPyPrTkDlK6F5Keo=,tag:gCNJi09B7JCBHPNHy5uMVA==,type:str]
|
gmail: ENC[AES256_GCM,data:WwDdjZx5TuJcsVdasWaEw0c=,iv:3HftLdrT12DB/DyPy4g20FbYRAhNPyPrTkDlK6F5Keo=,tag:gCNJi09B7JCBHPNHy5uMVA==,type:str]
|
||||||
|
proton:
|
||||||
|
email: ENC[AES256_GCM,data:H4Byh+a+PQ0TinXNcQpMMEgUTac=,iv:PWkxiPVLJn0uXI9m1Ijh266z1WAwUB7vjA7BQzueIG4=,tag:uB6t5Qi08QSkIo3lZhRA3g==,type:str]
|
||||||
backblaze:
|
backblaze:
|
||||||
apikey: ENC[AES256_GCM,data:WglELVuGMc4tt7Zap9W50iUk2XX/Ijz0E43P7cWMcYpEOGfI7rvqsb+Q,iv:xVv/8u0qLfxxxv7i6M65cz4gi8qO6ng2j30SY/1pnw8=,tag:FzipD8kV0D3eMrDwEsfLuA==,type:str]
|
apikey: ENC[AES256_GCM,data:WglELVuGMc4tt7Zap9W50iUk2XX/Ijz0E43P7cWMcYpEOGfI7rvqsb+Q,iv:xVv/8u0qLfxxxv7i6M65cz4gi8qO6ng2j30SY/1pnw8=,tag:FzipD8kV0D3eMrDwEsfLuA==,type:str]
|
||||||
backblaze_apikey: ENC[AES256_GCM,data:q5rVZBV3GQdY6ySOBVMFOPQDJGJmtMNdNi2zyMu6jjzQx7/AaQCbZxqT,iv:Mb2qoy6j+libJoNUFSPCw2EuE8pJEaMsW2ozWCEf2Ew=,tag:CmBFEDTwKi7EDT67C8Y4/A==,type:str]
|
backblaze_apikey: ENC[AES256_GCM,data:q5rVZBV3GQdY6ySOBVMFOPQDJGJmtMNdNi2zyMu6jjzQx7/AaQCbZxqT,iv:Mb2qoy6j+libJoNUFSPCw2EuE8pJEaMsW2ozWCEf2Ew=,tag:CmBFEDTwKi7EDT67C8Y4/A==,type:str]
|
||||||
|
radarr:
|
||||||
|
apikey: ENC[AES256_GCM,data:NINmhtjhAuQ266Z+VxY4qsjk/q2DJAecUST3XnwFDqo=,iv:+OlHR2QduPYNJQdoN3dAhNUEDr+Meaonp058tyangHM=,tag:OkAIyFuekFHqo41Fkmt2MQ==,type:str]
|
||||||
|
sonarr:
|
||||||
|
apikey: ENC[AES256_GCM,data:TBxluw9aCRHAZIP+01wejCk/amqzGnafOqPuYSnwHDU=,iv:xX5J+BpxtIGUFob6vxU2/n+xK8K6hIFdGCNNip795IU=,tag:h+bfbnepRmpS252xhYyj0g==,type:str]
|
||||||
steam:
|
steam:
|
||||||
recovery: ENC[AES256_GCM,data:pmKEJTIL,iv:WvH1jj0Q7PIYzsrMgpqkvdnUFL+zdbDzG5+3N+8DuWY=,tag:B7y1mbISbNCzFaicYodsXA==,type:str]
|
recovery: ENC[AES256_GCM,data:pmKEJTIL,iv:WvH1jj0Q7PIYzsrMgpqkvdnUFL+zdbDzG5+3N+8DuWY=,tag:B7y1mbISbNCzFaicYodsXA==,type:str]
|
||||||
dedyn:
|
dedyn:
|
||||||
@@ -45,6 +52,9 @@ namecheap:
|
|||||||
ddyn_password: ENC[AES256_GCM,data:kWYdgXnwdmAErHLpEU7CSbUYoIipv+F8rTCAxR2gAuk=,iv:4O5ngC/au+mTMXrzd+x8Jn+OB608QqE7Y4sRTDPvvCY=,tag:NxsK+LrZi6nYjRVvv+PRlQ==,type:str]
|
ddyn_password: ENC[AES256_GCM,data:kWYdgXnwdmAErHLpEU7CSbUYoIipv+F8rTCAxR2gAuk=,iv:4O5ngC/au+mTMXrzd+x8Jn+OB608QqE7Y4sRTDPvvCY=,tag:NxsK+LrZi6nYjRVvv+PRlQ==,type:str]
|
||||||
mongodb:
|
mongodb:
|
||||||
initial_password: ENC[AES256_GCM,data:3Jih05JKK9BbKVl1qAFJFCtfX3qUpnwO01Xxi1ZlydbbyPtiT0ROVCZPUa0qN0M=,iv:TsGNGxpFIOpRaUGSYY7KO6/zvM20rTswpKIq/4QaPwg=,tag:tbA6Q6O7TI+S7uA1iRyOow==,type:str]
|
initial_password: ENC[AES256_GCM,data:3Jih05JKK9BbKVl1qAFJFCtfX3qUpnwO01Xxi1ZlydbbyPtiT0ROVCZPUa0qN0M=,iv:TsGNGxpFIOpRaUGSYY7KO6/zvM20rTswpKIq/4QaPwg=,tag:tbA6Q6O7TI+S7uA1iRyOow==,type:str]
|
||||||
|
cifs:
|
||||||
|
user: ENC[AES256_GCM,data:gLlxFg==,iv:g4OChKmju3sQZNNxRpw4zF+OmLszJBk4eUY4pE3s4Sk=,tag:HwFe6YI5SPziY+3Z95kLLw==,type:str]
|
||||||
|
password: ENC[AES256_GCM,data:jPOpy+wKKYVyuDjeFA==,iv:jjukqSLaJ7rynZt8Xe5SabqJ+a2CUuBlul1IGrN2z1E=,tag:0+i4GBTCWYpD3wq43xHBAQ==,type:str]
|
||||||
sops:
|
sops:
|
||||||
age:
|
age:
|
||||||
- enc: |
|
- enc: |
|
||||||
@@ -56,7 +66,7 @@ sops:
|
|||||||
OXJfnqQIRsiwQJFNLDjB4hNZ5r9iupVj66BAbadO3pwlHWOFt6+PaQ==
|
OXJfnqQIRsiwQJFNLDjB4hNZ5r9iupVj66BAbadO3pwlHWOFt6+PaQ==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
recipient: age1xgfxwt7488dkpksgjawc53ewsc4p94jy6kdvnpd5r0jv5a5yr9tqzxy8x2
|
recipient: age1xgfxwt7488dkpksgjawc53ewsc4p94jy6kdvnpd5r0jv5a5yr9tqzxy8x2
|
||||||
lastmodified: "2026-09-15T04:02:30Z"
|
lastmodified: "2026-09-29T07:40:28Z"
|
||||||
mac: ENC[AES256_GCM,data:h92G5tOeUaD/nsx273vrh8INpS/S9mwQxrW3G0y26J+DC6in9GDYewbHrA5menlRWUCuiz6pomI75WZ2dAh7+YyWFyAOaxhNhF7GES355vMK5sEr+xn41yP6QXUcFBvU6p76Lv67QijtJIwQZuaycM2jNo7XXJtz7QDpr9T4Kcg=,iv:oLqFCAgLpPK/lq6NUE7ZtEoNY1GfaB5otJIrygdyOXs=,tag:+OwJRctOx7I1Rof3+MIutQ==,type:str]
|
mac: ENC[AES256_GCM,data:Le4QJ3G8+TkFthecp8MnngmUJUajjbsXt3WZxdbVUlt8hwAYJYDk889y8GQjvJn+dCZCf+sNMPQUwNF/CQd/GcAUN84PV8kAR+x3W+OJP2/6SrWl8Bz/asWViQvD6mj0xSeXTe3VgJM/MQwHGIV6XHBSjIOOTg6hSkwIC0fCHBU=,iv:anrJYiSw8CZ0d8M6zh1VR6u4mUl1y0wltE85WKv7uLg=,tag:KOP2ON70vmF3EBg4vICgDQ==,type:str]
|
||||||
unencrypted_suffix: _unencrypted
|
unencrypted_suffix: _unencrypted
|
||||||
version: 3.13.3
|
version: 3.13.3
|
||||||
|
|||||||
Reference in New Issue
Block a user