dachxy/nix-conf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: update flake & niri blur

Browse source
This commit is contained in:
danny 2026-03-06 17:06:53 +08:00
parent 601dfb9217
commit 98b4f598f8
36 changed files with 516 additions and 317 deletions
Download patch file Download diff file Expand all files Collapse all files

2
system/dev/dn-server/default.nix
View file

@ -46,7 +46,7 @@ in
'';
imports = [
../public/dn
../public/dn/presets/server.nix
./common
./home
./network

2
system/dev/dn-server/network/services.nix
View file

@ -33,8 +33,8 @@ let
};
allowedSSHIPs = concatStringsSep ", " [
"122.117.215.55"
"192.168.100.1/24"
"140.113.229.197/32"
personal.range
];

38
system/dev/dn-server/services/homepage.nix
View file

@ -13,7 +13,7 @@ in
enable = true;
openFirewall = true;
listenPort = 8044;
environmentFile = config.sops.secrets."homepage".path;
environmentFiles = [ config.sops.secrets."homepage".path ];
allowedHosts = "www.${domain},${domain},localhost:${toString cfg.listenPort}";
docker = {
docker = {
@ -64,6 +64,17 @@ in
}
];
}
{
"Development" = [
{
"Forgejo" = {
icon = "forgejo.svg";
description = "Git repository";
href = config.services.forgejo.settings.server.ROOT_URL;
};
}
];
}
{
"VPN & IDP" = [
{
@ -121,6 +132,31 @@ in
icon = "powerdns.svg";
description = "DNS record management";
href = "https://powerdns.${domain}";
widgets =
let
queryProp = ''job="powerdns_recursor"'';
in
[
{
type = "prometheusmetric";
url = "https://metrics.dnywe.com";
refreshInterval = 10000;
metrics = [
{
label = "Up";
query = "up{${queryProp}}";
}
{
label = "Query Rate";
query = "sum(rate(pdns_recursor_questions{${queryProp}}[1h]))";
format = {
type = "number";
suffix = " req/s";
};
}
];
}
];
};
}
{

2
system/dev/dn-server/services/mail-server.nix
View file

@ -21,6 +21,8 @@ in
"sa-update.surbl.org"
];
services.opendkim.enable = mkForce false;
mail-server =
let
domain = "net.dn";

2
system/dev/dn-server/services/metrics.nix
View file

@ -143,7 +143,7 @@ in
{
uid = "prometheus-dn-server";
name = "Prometheus";
url = "https://metrics.net.dn";
url = "https://${prometheusHostname}";
type = "prometheus";
}
];

2
system/dev/dn-server/services/minecraft-server.nix
View file

@ -119,7 +119,7 @@ in
serverVersion = lib.replaceStrings [ "." ] [ "_" ] "fabric-${mcVersion}";
in
{
enable = true;
enable = false;
autoStart = true;
enableReload = true;
jvmOpts = "-Xms2144M -Xmx8240M";

5
system/dev/dn-server/services/nextcloud.nix
View file

@ -48,7 +48,10 @@ in
(import ../../../modules/nextcloud.nix {
hostname = "nextcloud.${domain}";
adminpassFile = secrets."nextcloud/adminPassword".path;
trusted-proxies = [ "10.0.0.0/24" ];
trusted-proxies = [
"10.0.0.0/24"
"10.10.0.0/24"
];
whiteboardSecrets = [
secrets."nextcloud/whiteboard".path
];

6
system/dev/dn-server/sops/secret.yaml
View file

@ -21,7 +21,7 @@ nextcloud:
backendsecret: ENC[AES256_GCM,data:pV5yw755RkAwHBdmfeP37/SobFZqJouWyIiRJ+Y2mk0iiVdW04vhYVsyjcI=,iv:NhkewgnyE2Dw8mQMMSq6AWo6IOWu8BlyPZvZAszyZuQ=,tag:BlZO15qZWViV8pCWIgZHZQ==,type:str]
step_ca:
password: ENC[AES256_GCM,data:3NtUAl344gHiXLlMl88X17Vsm/4OKFM0W8bntzbXC0U=,iv:q9cWW8xTxYQnRYohBxnPIsbVSpvkZYVpYLRVeZgmsRM=,tag:ibumK7ebPKNO/CXAS0eeRA==,type:str]
vaultwarden: ENC[AES256_GCM,data:unu2+istP/NHcns2HUvNYveGElAEDFI+6X/KXYu2hKvY9c57PhmGVEmwlNhMWjHOSLaIvF48iDKCMnFnk20Fop5S2PS8WdNQ5sAA3mhoBnYGKIVsSsjpAqdIKj5c+AozeFODuIrCPRFm1JbOlgcmniwWNwbKtXt8GrgHzBbFUNX00npOwK9NmZOTxPVCj6gs3purULbsTzxDYZKdtqoM0Rv8E+MM/SLTR3QJnTCi7CxWfqy2tSsNzFh4puyZ0xf03m/fMP2iJqwZKjr0G5DwMl8ng0XvnojUcAg3OO34T7VCR1E6unqOpt8Mxc4l5eDVZEp6euchLB1GHP1OaElLCGvlp16xFKQyu+XtuFKxDrgl+AjVXl/rdl8Sk7fa9x6VzYbbJIR5Nzrwb+x9sJIc0Q5u6MroVsfawUzNH3aWkBCxQ0jGqkWyAZyumOuLxODpYETUCxiaBW6unEYSABibY5Q=,iv:5T/N41eLnPThRs1nwFiqMqyd6+RMWkDz6N4yVuAojH0=,tag:1gyxAtpZw/uhPWOoioFqKw==,type:str]
vaultwarden: ENC[AES256_GCM,data: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,iv:2pnql+V1QbuB11x7m4figiGJvxusOeVuadINrgjJXCo=,tag:tc/XruhnJ5iybOtajV/Lfg==,type:str]
ldap:
password: ENC[AES256_GCM,data:gz5WBopSffGyvJxKDPekPQ==,iv:bX7N9/oNMhtE/KbPah2ge4s87P2VsxHGoFkOyl83dxs=,tag:YoTe6NPAJgp/0nvhHC9Y5A==,type:str]
env: ENC[AES256_GCM,data:68EvTHeBqtCVfde5oO+Wzny+l/YIMWQmbcNQ0Wl59EjMrSlJM0rmFm2lMJpxKzCN2cFs0N2z6zG1/eQ9t/SxxyVBrNA6ECnCZrerIo2YGlaT30tc1rffpd8TchMH1VKP5qHnbLUqORMx5z0LR4U49l2HVcHgSCjt/1f127oMi411vIU=,iv:+m1F0CBaoJGv6Z1u+h6rbsXGPUhxgHouTalj13ccJiY=,tag:I/hK65yPaIcgHEZVaXJHBA==,type:str]
@ -95,7 +95,7 @@ sops:
OFloWEFuTC9GTXJsMG5NNktmdmIrY1kK0yN0ae0xNaydujV5lt2FiwXdyursG0DK
9i/B3TTAm9csDMMSTSFbiAUJDzG7kIqn++JU/cxvsGScSnhMqjEK/g==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-01-30T04:08:29Z"
mac: ENC[AES256_GCM,data:egK9zlAccBV2IeJ+DYTP3AKQUUMFPmts8eZMilQlyh+EE/oXhNnKeKkmNg9h1RwoZ6zh0LRDsyjubCc06PI/wVx2lJ0JfPs4bt6PckC1hZglRSHHjmocyx1eF5bMVfBLmluDzQ3Zms1Ryvuh+M+EjtdhttBljAIb0JIRx8Wzwks=,iv:wWrRiOvzZDboZSMgTzmbVVWzpSIhLdlgxgUIFXCFet0=,tag:YLBtLivKLBvByyfm4PbVXQ==,type:str]
lastmodified: "2026-02-15T10:06:42Z"
mac: ENC[AES256_GCM,data:Cuy342Fl4oze+1+eT0tJcOMR+c8iXpJWLH74g3+MAKWlU6F1uIW7qTXAYzkXiQRKtwG0+Hfbp8xQV/Ay19c20FyfWuDl8JAse+RbP50lHeX6GqW/P4I2s2B056emmamwb71NIlS03AkVoii7n8xqkzGmJz2bS+SWLvK/INS0eGM=,iv:bVgs5Xn7vvkmTpSbDJy+ZJ2vbcaomV1qcTIUyHXmpL4=,tag:Vc0IJLA2MFh7toqlDg8xUw==,type:str]
unencrypted_suffix: _unencrypted
version: 3.11.0