raphael/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(services/selfhosts): adding the format to nix files

Browse source
This commit is contained in:
Raphael 2026-02-28 16:45:00 +01:00
parent 76eb961891
commit 93d7fabef5
No known key found for this signature in database
4 changed files with 89 additions and 71 deletions
Download patch file Download diff file Expand all files Collapse all files

7
services/self_host/git.nix
View file

@ -1,4 +1,9 @@
{ config, pkgs, lib, ... }: {
config,
pkgs,
lib,
...
}:
let let
gitDomain = "git.enium.eu"; gitDomain = "git.enium.eu";

10
services/self_host/jellyfin.nix
View file

@ -1,14 +1,14 @@
{ {
config, config,
pkgs, pkgs,
lib, lib,
... ...
}: }:
let let
cfg = config.service.selfhost.jellyfin; cfg = config.service.selfhost.jellyfin;
wireguard-key = config.age.secrets."wireguard-secret".path; wireguard-key = config.age.secrets."wireguard-secret".path;
in in
{ {
config = lib.mkIf cfg { config = lib.mkIf cfg {
virtualisation = { virtualisation = {
docker.enable = true; docker.enable = true;

32
services/self_host/mail.nix
View file

@ -22,7 +22,7 @@ in
shell = "/run/current-system/sw/bin/nologin"; shell = "/run/current-system/sw/bin/nologin";
}; };
users.groups = { users.groups = {
vmail = {}; vmail = { };
}; };
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d /run/dovecot 0755 dovecot dovecot - -" "d /run/dovecot 0755 dovecot dovecot - -"
@ -84,14 +84,22 @@ in
chroot = false; chroot = false;
command = "smtpd"; command = "smtpd";
args = [ args = [
"-o" "smtpd_recipient_restrictions=permit_sasl_authenticated,reject" "-o"
"-o" "smtpd_sasl_auth_enable=yes" "smtpd_recipient_restrictions=permit_sasl_authenticated,reject"
"-o" "smtpd_sasl_security_options=noanonymous" "-o"
"-o" "smtpd_sender_login_maps=hash:/var/lib/postfix/sender_login" "smtpd_sasl_auth_enable=yes"
"-o" "smtpd_sender_restrictions=reject_sender_login_mismatch" "-o"
"-o" "smtpd_tls_auth_only=yes" "smtpd_sasl_security_options=noanonymous"
"-o" "smtpd_tls_security_level=encrypt" "-o"
"-o" "syslog_name=postfix/submission" "smtpd_sender_login_maps=hash:/var/lib/postfix/sender_login"
"-o"
"smtpd_sender_restrictions=reject_sender_login_mismatch"
"-o"
"smtpd_tls_auth_only=yes"
"-o"
"smtpd_tls_security_level=encrypt"
"-o"
"syslog_name=postfix/submission"
]; ];
}; };
}; };
@ -283,10 +291,10 @@ in
}; };
learn_condition = <<EOD learn_condition = <<EOD
return function(task) return function(task)
return true return true
end end
EOD; EOD;
}; };
rbl { rbl {

9
services/self_host/nextcloud.nix
View file

@ -1,4 +1,9 @@
{ config, pkgs, lib, ... }: {
config,
pkgs,
lib,
...
}:
let let
cfg = config.service.selfhost.nextcloud; cfg = config.service.selfhost.nextcloud;
@ -6,7 +11,7 @@ let
nextcloud-database = config.age.secrets."nextcloud-database".path; nextcloud-database = config.age.secrets."nextcloud-database".path;
dataDir = "/mnt/data/nextcloud"; dataDir = "/mnt/data/nextcloud";
in in
{ {
config = lib.mkIf cfg { config = lib.mkIf cfg {
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
php php