xun/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

remove firefly

Browse source
This commit is contained in:
xunuwu 2025-01-27 14:42:48 +01:00
parent 81d1cd5632
commit 87ecd9d69b
Signed by: xun
SSH key fingerprint: SHA256:Uot/1WoAjWAeqLOHA5vYy4phhVydsH7jCPmBjaPZfgI
2 changed files with 20 additions and 57 deletions
Download patch file Download diff file Expand all files Collapse all files

57
sys/machines/hopper/lab/default.nix
View file

@ -203,16 +203,6 @@ in {
reverse_proxy unix//var/lib/navidrome/navidrome.sock reverse_proxy unix//var/lib/navidrome/navidrome.sock
''; '';
}; };
firefly = {
useACMEHost = null;
hostName = "firefly.hopper.xun.host:80";
extraConfig = ''
encode zstd gzip
root * ${config.services.firefly-iii.package}/public
php_fastcgi unix/${config.services.phpfpm.pools.firefly-iii.socket}
file_server
'';
};
# slskd-pub = { # slskd-pub = {
# hostName = "slskd.${domain}:${toString caddyPort}"; # hostName = "slskd.${domain}:${toString caddyPort}";
# extraConfig = '' # extraConfig = ''
@ -261,36 +251,6 @@ in {
}; };
}; };
# https://github.com/diogotcorreia/dotfiles/blob/f49cda185cef30d8150a08b60112766f4fc95813/hosts/hera/firefly-iii.nix#L19
services.firefly-iii = {
enable = true;
virtualHost = "firefly.hopper.xun.host";
group = config.services.caddy.group;
settings = {
DB_CONNECTION = "pgsql";
APP_KEY_FILE = config.sops.secrets.firefly.path;
};
};
services.postgresql = {
enable = true;
ensureUsers = [
{
name = config.services.firefly-iii.user;
ensureDBOwnership = true;
ensureClauses.login = true;
}
];
ensureDatabases = [config.services.firefly-iii.user];
};
services.firefly-iii-data-importer = {
enable = true;
group = config.services.caddy.group;
settings = {
FIREFLY_III_URL = config.services.firefly-iii.settings.APP_URL;
FIREFLY_III_ACCESS_TOKEN = config.sops.secrets.firefly-data-importer.path;
};
};
systemd.services.homepage-dashboard.vpnConfinement = { systemd.services.homepage-dashboard.vpnConfinement = {
enable = true; enable = true;
vpnNamespace = "wg"; vpnNamespace = "wg";
@ -336,6 +296,12 @@ in {
icon = "jellyfin"; icon = "jellyfin";
}; };
} }
{
"navidrome" = {
href = "http://navidrome.hopper.xun.host";
icon = "jellyfin";
};
}
{ {
"adguard home" = { "adguard home" = {
href = "http://${config.networking.hostName}:${toString config.services.adguardhome.port}"; href = "http://${config.networking.hostName}:${toString config.services.adguardhome.port}";
@ -354,12 +320,6 @@ in {
icon = "kanidm"; icon = "kanidm";
}; };
} }
{
"firefly iii" = {
href = "http://firefly.hopper.xun.host";
icon = "firefly-iii";
};
}
]; ];
} }
]; ];
@ -505,7 +465,10 @@ in {
services.oauth2-proxy = { services.oauth2-proxy = {
enable = true; enable = true;
clientID = "oauth2-proxy"; clientID = "oauth2-proxy";
cookie.expire = "24h"; cookie = {
expire = "24h";
# secure = false;
};
email.domains = ["*"]; email.domains = ["*"];
httpAddress = "unix:///run/oauth2-proxy/oauth2-proxy.sock"; httpAddress = "unix:///run/oauth2-proxy/oauth2-proxy.sock";
scope = "openid profile email"; scope = "openid profile email";

20
sys/profiles/secrets/hopper/default.nix
View file

@ -59,16 +59,16 @@ in {
owner = "kanidm"; owner = "kanidm";
}; };
firefly = { # firefly = {
format = "binary"; # format = "binary";
sopsFile = ./firefly; # sopsFile = ./firefly;
owner = config.services.firefly-iii.user; # owner = config.services.firefly-iii.user;
}; # };
firefly-data-importer = { # firefly-data-importer = {
format = "binary"; # format = "binary";
sopsFile = ./firefly-data-importer; # sopsFile = ./firefly-data-importer;
owner = config.services.firefly-iii-data-importer.user; # owner = config.services.firefly-iii-data-importer.user;
}; # };
# "keycloak/db" = { # "keycloak/db" = {
# sopsFile = ./keycloak.yaml; # sopsFile = ./keycloak.yaml;