-21

flake.lock

Reviewed

··· 320 320 "nixpkgs": "nixpkgs", 321 321 "seberjune": "seberjune", 322 322 "systems": "systems", 323 323 - "tranquil-pds": "tranquil-pds", 324 323 "washing-machien": "washing-machien", 325 324 "zen-browser": "zen-browser" 326 325 } ··· 358 357 "owner": "nix-systems", 359 358 "repo": "default", 360 359 "type": "github" 361 361 - } 362 362 - }, 363 363 - "tranquil-pds": { 364 364 - "inputs": { 365 365 - "nixpkgs": [ 366 366 - "nixpkgs" 367 367 - ] 368 368 - }, 369 369 - "locked": { 370 370 - "lastModified": 1780656565, 371 371 - "narHash": "sha256-K+Xxn/CD6c2c18wPteWm6EUknWHIKBB+2JFQcf6zW5Y=", 372 372 - "ref": "refs/heads/main", 373 373 - "rev": "cd7e01100eae142806373e84a9006b103c80f18e", 374 374 - "revCount": 412, 375 375 - "type": "git", 376 376 - "url": "https://tangled.org/did:web:tranquil.tranquil.farm/tranquil-pds" 377 377 - }, 378 378 - "original": { 379 379 - "type": "git", 380 380 - "url": "https://tangled.org/did:web:tranquil.tranquil.farm/tranquil-pds" 381 360 } 382 361 }, 383 362 "washing-machien": {

-5

flake.nix

Reviewed

··· 51 51 }; 52 52 }; 53 53 54 54 - tranquil-pds = { 55 55 - url = "git+https://tangled.org/did:web:tranquil.tranquil.farm/tranquil-pds"; 56 56 - inputs.nixpkgs.follows = "nixpkgs"; 57 57 - }; 58 58 - 59 54 washing-machien = { 60 55 url = "git+https://tangled.org/did:plc:nz5npphohxgjo2blfipdatam/washing-machien"; 61 56 inputs.nixpkgs.follows = "nixpkgs";

-1

secrets/secrets.nix

Reviewed

··· 7 7 "jellyfin-rpc.json.age".publicKeys = koi; 8 8 "washing-machien.env.age".publicKeys = koi; 9 9 "cloudflared.pem.age".publicKeys = koi; 10 10 - "tranquil.env.age".publicKeys = koi; 11 10 12 11 "email-pass-me.age".publicKeys = koi; 13 12 "email-pass-noreply.age".publicKeys = koi;

secrets/tranquil.env.age

Reviewed

This is a binary file and will not be displayed.

-25

systems/miku/services/cloudflared.nix

Reviewed

··· 1 1 - { pkgs, ... }: 2 2 - { 3 3 - age.secrets.cloudflared.file = ../../../secrets/cloudflared.pem.age; 4 4 - systemd.services.cloudflared = { 5 5 - description = "cloudflare tunnel"; 6 6 - after = [ "jellyfin.service" ]; 7 7 - wantedBy = [ "multi-user.target" ]; 8 8 - 9 9 - path = [ pkgs.cloudflared ]; 10 10 - 11 11 - script = '' 12 12 - export TUNNEL_ORIGIN_CERT=/run/agenix/cloudflared 13 13 - 14 14 - cloudflared=${pkgs.cloudflared}/bin/cloudflared 15 15 - token=$($cloudflared tunnel token jelly) 16 16 - 17 17 - $cloudflared tunnel run --protocol http2 --token $token 18 18 - ''; 19 19 - 20 20 - serviceConfig = { 21 21 - Restart = "on-failure"; 22 22 - RestartSec = 60; 23 23 - }; 24 24 - }; 25 25 - }

-2

systems/miku/services/default.nix

Reviewed

··· 3 3 ./logind.nix 4 4 ./beszel-agent.nix 5 5 ./jellyfin.nix 6 6 - ./cloudflared.nix 7 7 - ./tranquil-pds.nix 8 6 ./seberjune.nix 9 7 ./washing-machien.nix 10 8 ];

-48

systems/miku/services/tranquil-pds.nix

Reviewed

··· 1 1 - { inputs, config, ... }: 2 2 - { 3 3 - imports = [ inputs.tranquil-pds.nixosModules.tranquil-pds ]; 4 4 - disabledModules = [ "services/web-apps/tranquil-pds.nix" ]; 5 5 - 6 6 - age.secrets.tranquil-env = { 7 7 - file = ../../../secrets/tranquil.env.age; 8 8 - owner = "tranquil-pds"; 9 9 - }; 10 10 - 11 11 - nix.settings = { 12 12 - substituters = [ "https://tranquil.cachix.org" ]; 13 13 - trusted-public-keys = [ 14 14 - "tranquil.cachix.org-1:PoO+mGL6a6LcJiPakMDHN4E218/ei/7v2sxeDtNkSRg=" 15 15 - ]; 16 16 - }; 17 17 - 18 18 - services.tranquil-pds = { 19 19 - enable = true; 20 20 - database.createLocally = true; 21 21 - environmentFiles = [ config.age.secrets.tranquil-env.path ]; 22 22 - user = "tranquil-pds"; 23 23 - settings = { 24 24 - server = { 25 25 - host = "127.0.0.1"; 26 26 - port = 8830; 27 27 - hostname = "pds.ebil.club"; 28 28 - max_blob_size = 1073741824; # 1 GiB 29 29 - user_handle_domains = [ ]; 30 30 - age_assurance_override = true; 31 31 - invite_code_required = true; 32 32 - }; 33 33 - moderation = { 34 34 - report_service_url = "https://ozone.wizardry.systems"; 35 35 - report_service_did = "did:plc:yfklixyvt4y3irrkdb4mtvqn"; 36 36 - }; 37 37 - email = { 38 38 - from_address = "noreply@koi.rip"; 39 39 - from_name = "ebil.club PDS"; 40 40 - smarthost = { 41 41 - host = "smtp.purelymail.com"; 42 42 - tls = "starttls"; 43 43 - port = 587; 44 44 - }; 45 45 - }; 46 46 - }; 47 47 - }; 48 48 - }