sora/nixconfig
1
0
Fork 0
Code Issues 1 Pull Requests Actions Releases Activity

Compare commits

base: sora:d02931c64eb95c6f4f1647b645eb4706953daeae
Branches Tags
sora:main
..
compare: sora:3207a692fd00d719c3ac429d19e796f0a7a154f2
Branches Tags
sora:main

2 Commits
d02931c64e ... 3207a692fd

Author SHA1 Message Date
Renovate Bot
3207a692fd Lock file maintenance 2023-12-01 14:10:28 +00:00
soraefir
7a3a2a9f69 [m] Server: adding docker 2023-12-01 12:54:30 +01:00
6 changed files with 134 additions and 28 deletions
Show Stats Expand all files Collapse all files

32
flake.lock generated
View File

@ -59,11 +59,11 @@
]
},
"locked": {
"lastModified": 1701071203,
"narHash": "sha256-lQywA7QU/vzTdZ1apI0PfgCWNyQobXUYghVrR5zuIeM=",
"lastModified": 1701433070,
"narHash": "sha256-Gf9JStfENaUQ7YWFz3V7x/srIwr4nlnVteqaAxtwpgM=",
"owner": "nix-community",
"repo": "home-manager",
"rev": "db1878f013b52ba5e4034db7c1b63e8d04173a86",
"rev": "4a8545f5e737a6338814a4676dc8e18c7f43fc57",
"type": "github"
},
"original": {
@ -83,11 +83,11 @@
"xdph": "xdph"
},
"locked": {
"lastModified": 1701264997,
"narHash": "sha256-0Q9gNAxk//uaXJd5llBP+1TbgP7FgCZBVdX0rYd3MvM=",
"lastModified": 1701393128,
"narHash": "sha256-SYTztE8kHHpUVmVdHlQQVi2qhDi5oPQiXQ+K4/bc1nA=",
"owner": "hyprwm",
"repo": "Hyprland",
"rev": "b80c72c7ddbf79147d64759c8659eb5939d0327e",
"rev": "8440a30231ea41a6b1dacc60a28837b265a6efec",
"type": "github"
},
"original": {
@ -142,11 +142,11 @@
},
"nixpkgs": {
"locked": {
"lastModified": 1701068326,
"narHash": "sha256-vmMceA+q6hG1yrjb+MP8T0YFDQIrW3bl45e7z24IEts=",
"lastModified": 1701253981,
"narHash": "sha256-ztaDIyZ7HrTAfEEUt9AtTDNoCYxUdSd6NrRHaYOIxtk=",
"owner": "nixos",
"repo": "nixpkgs",
"rev": "8cfef6986adfb599ba379ae53c9f5631ecd2fd9c",
"rev": "e92039b55bcd58469325ded85d4f58dd5a4eaf58",
"type": "github"
},
"original": {
@ -173,11 +173,11 @@
},
"nur": {
"locked": {
"lastModified": 1701297900,
"narHash": "sha256-P2iNMqLm8lgcfsuLQEAPmbZeYomWfckTNA2TEDLlER8=",
"lastModified": 1701437187,
"narHash": "sha256-oL2aDfzdUv2dKH01OIapTMmzayyQzgfrOYlEoh139Nk=",
"owner": "nix-community",
"repo": "nur",
"rev": "64dba129a417f506338de690a3e8b8829e7d8df6",
"rev": "da2d107831df50c8935dfb08999adf06834bea19",
"type": "github"
},
"original": {
@ -240,18 +240,18 @@
"flake": false,
"locked": {
"host": "gitlab.freedesktop.org",
"lastModified": 1700734054,
"narHash": "sha256-SBu1y01WjCSrcCKvgfCDDckrZjU/OmCJT8Xc+hPow7E=",
"lastModified": 1701368958,
"narHash": "sha256-7kvyoA91etzVEl9mkA/EJfB6z/PltxX7Xc4gcr7/xlo=",
"owner": "wlroots",
"repo": "wlroots",
"rev": "2eb225236eb72f27beec921e9f37ddf58e874fba",
"rev": "5d639394f3e83b01596dcd166a44a9a1a2583350",
"type": "gitlab"
},
"original": {
"host": "gitlab.freedesktop.org",
"owner": "wlroots",
"repo": "wlroots",
"rev": "2eb225236eb72f27beec921e9f37ddf58e874fba",
"rev": "5d639394f3e83b01596dcd166a44a9a1a2583350",
"type": "gitlab"
}
},

14
modules/home/wayland/apps/dunst/default.nix
View File

@ -26,8 +26,8 @@
padding = "12";
horizontal_padding = "15";
text_icon_padding = "0";
frame_width = "2";
frame_color = "#${config.colorScheme.colors.base03}";
frame_width = "${config.colorScheme.colors.border-width}";
frame_color = "#${config.colorScheme.colors.base04}";
separator_color = "auto";
sort = "yes";
font = "IBM Plex Mono 14";
@ -69,23 +69,23 @@
};
urgency_low = {
background = "#${config.colorScheme.colors.base00}";
background = "#${config.colorScheme.colors.base01}";
foreground = "#${config.colorScheme.colors.base07}";
frame_color = "#${config.colorScheme.colors.base03}";
timeout = "3";
highlight = "#${config.colorScheme.colors.base0B}";
};
urgency_normal = {
background = "#${config.colorScheme.colors.base00}";
background = "#${config.colorScheme.colors.base01}";
foreground = "#${config.colorScheme.colors.base07}";
frame_color = "#${config.colorScheme.colors.base03}";
frame_color = "#${config.colorScheme.colors.base04}";
timeout = "5";
highlight = "#${config.colorScheme.colors.base0C}";
};
urgency_critical = {
background = "#${config.colorScheme.colors.base00}";
background = "#${config.colorScheme.colors.base01}";
foreground = "#${config.colorScheme.colors.base0F}";
frame_color = "#${config.colorScheme.colors.base03}";
frame_color = "#${config.colorScheme.colors.base0F}";
timeout = "10";
highlight = "#${config.colorScheme.colors.base0E}";
};

4
systems/asguard/default.nix
View File

@ -1,6 +1,4 @@
{ config, pkgs, ... }:
{
{ config, pkgs, ... }: {
imports = [ ];
users.users.sora = {

2
systems/avalon/home.nix
View File

@ -1,6 +1,4 @@
{ ... }: {
imports = [ ./display.nix ];
config.homecfg = {
username = "sora";
make = {

4
systems/avalon/server/default.nix Normal file
View File

@ -0,0 +1,4 @@
{ ... }:
{
}

106
systems/avalon/server/docker/default.nix Normal file
View File

@ -0,0 +1,106 @@
{ pkgs, ... }:
let
HOST_DOMAIN = "helcel.net";
MAIL_HOST_DOMAIN = "norereply.${HOST_DOMAIN}";
MAIL_SERVER_DOMAIN = "mail.infomaniak.com";
in {
project.name = "Authentik";
networks = {
internal = {
internal = true;
external = false;
};
external = { external = true; };
};
services = {
auth_postgresql.service = {
image = "postgres:14-alpine";
container_name = "auth_postgresql";
restart = "unless-stopped";
networks = [ "internal" ];
volumes = [ ];
environment = {
POSTGRES_PASSWORD = "/run/secrets/AUTHENTIK_POSTGRESQL__PASSWORD";
POSTGRES_USER = "authentik";
POSTGRES_DB = "authentik";
};
};
auth_redis.service = {
image = "redis:alpine";
container_name = "auth_redis";
restart = "unless-stopped";
networks = [ "internal" ];
volumes = [ ];
environment = { };
labels = { "traefik.enable" = "false"; };
};
auth_server.service = {
image = "ghcr.io/goauthentik/server:latest";
container_name = "auth_server";
restart = "unless-stopped";
networks = [ "internal" "external" ];
volumes = [
"/media/data/authentik/media:/media"
"/media/data/authentik/templates:/templates"
];
environment = {
"AUTHENTIK_REDIS__HOST" = "auth_redis";
"AUTHENTIK_POSTGRESQL__HOST" = "auth_postgresql";
"AUTHENTIK_POSTGRESQL__USER" = "authentik";
"AUTHENTIK_POSTGRESQL__NAME" = "authentik";
"AUTHENTIK_POSTGRESQL__PASSWORD" =
"/run/secrets/AUTHENTIK_POSTGRESQL__PASSWORD";
"AUTHENTIK_SECRET_KEY" = "/run/secrets/AUTHENTIK_SECRET_KEY";
"AUTHENTIK_EMAIL__HOST" = "${MAIL_SERVER_DOMAIN}";
"AUTHENTIK_EMAIL__PORT" = "587";
"AUTHENTIK_EMAIL__USERNAME" = "noreply@${MAIL_HOST_DOMAIN}";
"AUTHENTIK_EMAIL__PASSWORD" = "/run/secrets/AUTHENTIK_EMAIL__PASSWORD";
"AUTHENTIK_EMAIL__USE_TLS" = "true";
"AUTHENTIK_EMAIL__USE_SSL" = "false";
"AUTHENTIK_EMAIL__TIMEOUT" = "10";
"AUTHENTIK_EMAIL__FROM" = "sso@noreply.${MAIL_HOST_DOMAIN}";
};
labels = {
"traefik.enable" = "true";
"traefik.http.routers.sso.entrypoints" = "web-secure";
"traefik.http.routers.sso.rule" = "Host(`sso.${HOST_DOMAIN}`)";
"traefik.http.routers.sso.tls" = "true";
"traefik.http.services.sso.loadbalancer.server.port" = "9000";
"traefik.docker.network" = "external";
};
command = "server";
service.ports = [
"9999:9000" # host:container
];
};
auth_worker.service = {
image = "ghcr.io/goauthentik/server:latest";
container_name = "auth_worker";
restart = "unless-stopped";
networks = [ "internal" ];
volumes = [
"/media/data/authentik/media:/media"
"/media/data/authentik/templates:/templates"
"/var/run/docker.sock:/var/run/docker.sock"
];
environment = {
"AUTHENTIK_REDIS__HOST" = "auth_redis";
"AUTHENTIK_POSTGRESQL__HOST" = "auth_postgresql";
"AUTHENTIK_POSTGRESQL__USER" = "authentik";
"AUTHENTIK_POSTGRESQL__NAME" = "authentik";
"AUTHENTIK_POSTGRESQL__PASSWORD" =
"/run/secrets/AUTHENTIK_POSTGRESQL__PASSWORD";
"AUTHENTIK_SECRET_KEY" = "/run/secrets/AUTHENTIK_SECRET_KEY";
};
labels = { "traefik.enable" = "false"; };
command = "worker";
user = "root";
};
};
}