Commit graph

92 commits

Author SHA1 Message Date
Christoph Heiss ca6861b25c
services: matrix-hookshot: switch bridge bind address to ipv6
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-20 21:12:25 +02:00
Christoph Heiss e1163ab15b
services: home-assistant: move reverse proxy definition to service file
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-20 15:58:47 +02:00
Christoph Heiss 5f1d34452a
services: sourcehut: set up redirect for additional subdomain
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-20 15:51:16 +02:00
Christoph Heiss 0f678e07a2
services: paperless: move reverse proxy definition to service file
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-20 15:50:41 +02:00
Christoph Heiss ad5fa64abb
services: paperless: ensure redis socket is available before starting
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-20 12:48:46 +02:00
Christoph Heiss e9472ed01b
services: alertmanager: switch to local address for simplicity
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-20 12:48:15 +02:00
Christoph Heiss 389f3452bd
services: openssh: disable sftp subsystem
This was really only needed for morph to work anyway.

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-18 12:04:26 +02:00
Christoph Heiss caae71508e
services: grafana: drop dashboard provisioning
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-14 12:01:07 +02:00
Christoph Heiss fa30e23456
services: navidrome: switch to sqlite .backup command for backups
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-13 18:43:38 +02:00
Christoph Heiss 28691f1999
services: navidrome: use headless ffmpeg
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-13 18:43:20 +02:00
Christoph Heiss 320b97d660
tree-wide: convert everything from morph to nixinate + sops-nix
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-10 01:20:50 +02:00
Christoph Heiss 83c7b415d1
services: alertmanager: add initial deployment
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-04-20 21:27:19 +02:00
Christoph Heiss e91b3ce221
services: matrix-hookshot: allow js transformation funcs for webhooks
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-04-20 21:25:31 +02:00
Christoph Heiss 6b69dc4df0
services: sourcehut: streamline configuration a bit more
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-04-16 19:31:29 +02:00
Christoph Heiss f185afdc87
services: tt-rss: add initial deployment
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-04-15 23:22:28 +02:00
Christoph Heiss a764aad605
services: sourcehut: add custom nixpkgs source for sourcehut
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-04-10 21:05:13 +02:00
Christoph Heiss 9a5b22767d
machines: tank: add prometheus smartctl exporter
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-04-10 21:01:52 +02:00
Christoph Heiss cebe84fb9f
services: web: c8h4-io: replace activation script with systemd tmpfiles
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-04-06 14:45:28 +02:00
Christoph Heiss f5e29e7cea
services: paperless: skip creating archive files for files containing text
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-25 11:24:28 +01:00
Christoph Heiss 8b44c5b6c1
services: vaultwarden: add initial service configuration
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-24 14:26:24 +01:00
Christoph Heiss f76378c829
services: paperless: fix config typo in USE_X_FORWARD_*
Fixes: 5752d22 ("services: paperless: move to own subdomain")
Reported-by: Nico Kratky <nico@nicokratky.me>
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-22 22:43:55 +01:00
Christoph Heiss ea19deb604
services: paperless: use toybox for preStart script
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-22 21:59:07 +01:00
Christoph Heiss 5752d22cc5
services: paperless: move to own subdomain
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-22 21:57:54 +01:00
Christoph Heiss cf8d568548
services: paperless: drop now-obsolete secret key setting
Since 63ef03399 ("nixos/paperless: set PAPERLESS_SECRET_KEY"), this is
set up (in an even better way) by the NixOS module already.

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-22 21:38:44 +01:00
Christoph Heiss e36e8d68ce
services: matrix-conduit: use sqlite .backup command instead of .dump
SQLite documents this [0] as the best way to perform backups on these
files [1], so use it.

[0] https://www.sqlite.org/backup.html
[1] https://www.sqlite.org/howtocorrupt.html#_backup_or_restore_while_a_transaction_is_active

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-14 22:27:48 +01:00
Christoph Heiss 9219504c20
services: prometheus: restructure a bit, extract node-exporter
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-03 21:31:50 +01:00
Christoph Heiss 717068c6a0
services: prometheus: add openwrt-exporter
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-02-16 19:13:30 +01:00
Christoph Heiss 93a7b44f88
services: prometheus: add node-exporter, only local for now
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-02-16 19:13:30 +01:00
Christoph Heiss 098827a8dc
services: home-assistant,prometheus: add home-assistant metrics exporter
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-02-16 19:13:30 +01:00
Christoph Heiss 8de87b719a
services: grafana: add dashboard provisioner
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-02-10 20:41:41 +01:00
Christoph Heiss 0fa94701b7
services: prometheus: add initial deployment
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-02-10 20:41:41 +01:00
Christoph Heiss b63c953cf0
services: gatus: drop completely
Will be replaced by Grafana + Mimir + blackbox-exporter (probably) in
the future.

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-02-10 20:41:24 +01:00
Christoph Heiss 7638f4ebec
services: grafana: add basic service deployment
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-02-10 20:41:21 +01:00
Christoph Heiss c670ca4dd2
services: sourcehut: bind to IPv6 local socket only
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-02-09 23:40:06 +01:00
Christoph Heiss 4a4e0576b3
services: paperless, nextcloud: fix for nixpkgs 31-01-2024
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-02-09 23:14:42 +01:00
Christoph Heiss 521313ea8f
secrets: shuffle them around a bit, enforce some better pratices
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-31 00:13:42 +01:00
Christoph Heiss 35a358c606
modules: services: add nextcloud instances module
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-29 20:25:44 +01:00
Christoph Heiss 69ba03c2b8
services: conduit, matrix-hookshot: switch to localhost & IPv6 only
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-29 18:03:57 +01:00
Christoph Heiss 3f241930e7
services: navidrome: disable firewall rules and transcoding option menu
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-27 18:44:48 +01:00
Christoph Heiss 173fde14af
machines: tank: switch some more services to local IPv6 only
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-22 23:58:52 +01:00
Christoph Heiss a7995465bc
services: navidrome: add database backup using restic
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-21 20:44:43 +01:00
Christoph Heiss f746d38e7f
services: navidrome: add new deployment on tank
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-21 01:53:01 +01:00
Christoph Heiss 9d99ac705b
services: nginx: simplify ACME setup a bit
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-21 00:31:25 +01:00
Christoph Heiss 8eec828a1d
services: paperless: add classification model to backup
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-20 00:58:00 +01:00
Christoph Heiss e2f5beea06
services: home-assistant: add switch for waking/powering off workstation
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-15 17:07:51 +01:00
Christoph Heiss 2eb55a419f
services: home-assistant: add MQTT/Tasmota integration
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-08 14:10:55 +01:00
Christoph Heiss b9c6573c43
services: home-assistant: use IPv6 internally
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-08 12:59:38 +01:00
Christoph Heiss e4263756e5
services: home-assistant: use postgresql database for recorder integration
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-07 19:29:49 +01:00
Christoph Heiss fddde98985
machines: tank: add basic home-assistant service enablement
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-07 04:02:36 +01:00
Christoph Heiss f478799fdd
modules: gatus: add meta.maintainers entry
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-01-05 16:05:22 +01:00