genebean/dots
1
0
Fork 0
mirror of https://github.com/genebean/dots.git synced 2026-03-28 01:47:42 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Everything is migrated! Now to clean up...

Browse source
This commit is contained in:
Gene Liverman 2024-06-21 23:29:49 -04:00
parent 3075248fc7
commit 3457194cdd
8 changed files with 168 additions and 145 deletions
Download patch file Download diff file Expand all files Collapse all files

33
modules/hosts/nixos/hetznix01/post-install/default.nix
View file

@ -1,12 +1,45 @@
{ config, username, ... }: {
imports = [
../../../../system/common/linux/lets-encrypt.nix
../../../../system/common/linux/restic.nix
./matrix-synapse.nix
./nginx.nix
];
mailserver = {
enable = true;
enableImap = false;
enableImapSsl = false;
fqdn = "mail.alt.technicalissues.us";
domains = [
"alt.technicalissues.us"
"indianspringsbsa.org"
];
forwards = {
"webmaster@indianspringsbsa.org" = "gene+indianspringsbsa.org@geneliverman.com";
"newsletter@indianspringsbsa.org" = "gene+indianspringsbsa.org@geneliverman.com";
"@alt.technicalissues.us" = "gene+alt.technicalissues.us@geneliverman.com";
};
# Use Let's Encrypt certificates from Nginx
certificateScheme = "acme";
};
# Cert for the mail server
security.acme.certs."alt.technicalissues.us" = {
extraDomainNames = [
"mail.alt.technicalissues.us"
"mail.indianspringsbsa.org"
];
reloadServices = [
"postfix.service"
];
};
services = {
restic.backups.daily.paths = [
"${config.users.users.${username}.home}/compose-files/owntracks"
"/var/backup/postgresql"
"/var/lib/uptime-kuma"
];
tailscale = {

4
modules/hosts/nixos/hetznix01/post-install/matrix-synapse.nix
View file

@ -1,6 +1,4 @@
{ config, pkgs, ... }: let
#
in {
{ config, ... }: {
services.matrix-synapse = {
enable = true;
configureRedisLocally = true;

4
modules/hosts/nixos/hetznix01/post-install/nginx.nix
View file

@ -1,12 +1,8 @@
{ config, ... }: let
domain = "technicalissues.us";
http_port = 80;
https_port = 443;
in {
imports = [
../../../../system/common/linux/lets-encrypt.nix
];
services.nginx = {
enable = true;
recommendedBrotliSettings = true;