commit f54166578012cf3e8d57d3877797a9d003cff36e
parent 5aff77a45dcb32d360417b6b1a9d6671e1c16650
Author: Katja (ctucx) <git@ctu.cx>
Date: Thu, 24 Apr 2025 13:58:18 +0200
parent 5aff77a45dcb32d360417b6b1a9d6671e1c16650
Author: Katja (ctucx) <git@ctu.cx>
Date: Thu, 24 Apr 2025 13:58:18 +0200
configurations/nixos/websites: move things to `katja.wtf` domain and node `rabbit`
6 files changed, 42 insertions(+), 42 deletions(-)
diff --git a/configurations/nixos/websites/things.ctu.cx.nix b/configurations/nixos/websites/things.ctu.cx.nix @@ -1,29 +0,0 @@ -{ inputs, secrets, config, pkgs, lib, ... }: - -{ - - dns.zones."ctu.cx".subdomains."things".CNAME = [ "${config.networking.fqdn}." ]; - - age.secrets.resticCtucxThings.file = secrets."${config.networking.hostName}".restic.ctucxThings; - - restic-backups.ctucx-things = { - user = "ctucx-things"; - passwordFile = config.age.secrets.resticCtucxThings.path; - paths = [ "/var/lib/ctucx-things" ]; - }; - - services.ctucx-things = { - enable = true; - storagePath = "/var/lib/ctucx-things"; - nginx.enable = true; - nginx.domain = "things.ctu.cx"; - }; - - services.nginx.virtualHosts."things.ctu.cx" = { - useACMEHost = "${config.networking.fqdn}"; - forceSSL = true; - kTLS = true; - }; - -} -
diff --git a/configurations/nixos/websites/things.katja.wtf.nix b/configurations/nixos/websites/things.katja.wtf.nix @@ -0,0 +1,29 @@ +{ inputs, secrets, config, pkgs, lib, ... }: + +{ + + dns.zones."katja.wtf".subdomains."things".CNAME = [ "${config.networking.fqdn}." ]; + + age.secrets.resticCtucxThings.file = secrets."${config.networking.hostName}".restic.ctucxThings; + + restic-backups.ctucx-things = { + user = "ctucx-things"; + passwordFile = config.age.secrets.resticCtucxThings.path; + paths = [ "/var/lib/ctucx-things" ]; + }; + + services.ctucx-things = { + enable = true; + storagePath = "/var/lib/ctucx-things"; + nginx.enable = true; + nginx.domain = "things.katja.wtf"; + }; + + services.nginx.virtualHosts."things.katja.wtf" = { + useACMEHost = "${config.networking.fqdn}"; + forceSSL = true; + kTLS = true; + }; + +} +
diff --git a/nodes/hector/default.nix b/nodes/hector/default.nix @@ -27,7 +27,6 @@ # website / webservices ctucxConfig.websites."ctu.cx" - ctucxConfig.websites."things.ctu.cx" ctucxConfig.websites."bikemap.ctu.cx" ctucxConfig.websites."grocy.ctu.cx"
diff --git a/nodes/rabbit/default.nix b/nodes/rabbit/default.nix @@ -30,6 +30,7 @@ # website / webservices ctucxConfig.websites."oeffi.katja.wtf" + ctucxConfig.websites."things.katja.wtf" ]; home-manager.users.katja.imports = [
diff --git a/secrets/hector/restic/ctucxThings.age b/secrets/hector/restic/ctucxThings.age @@ -1,12 +0,0 @@ ------BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWRXlqWkQzQ09hVHVjemla -WmpIaWVaS21lYXA4T25xa2hONVFDQ0tVZjFFCk5BQnY1VWJGYmZDOHlhVnFEY2c1 -UHpuci9oNlRuam1LTUVHNzFESmV3L3cKLT4gc3NoLWVkMjU1MTkgeWFMSFNRIHpO -K3VDRUVndHp0dnlGTFdIbTlNR0xWcmw0SU9oRXR0a3NhbGhjVTRDeEUKcURUbFhE -by90SEVubU1rRUhKK1kyQkE4U3B3VVVIUFNXaVFJeEsxNFBWMAotPiAjLWdyZWFz -ZSBEWGNCPl5nawpiSDY5bUdIZUJwTWxJMktEWWVtWmVmMVhvN0lneElvWXl1TzBC -VEJGQURtWjRqL2JYZm0zSXBBCi0tLSBDcHZtM2pTbHJpNFhyRDg2ZUovQ0loTzUw -WHJjbnpIZkMrUE9TaTFpeGo4CjgsRbhemea4uaQxbwupDR7A0yiR0X0VnpybisnM -nOxjdwy3/rA1ADzS/Az4N1xgux08hpGkoVi60hDyiFLTC9b7UKcHfS12GpUXMZPA -n05MLDhDLJu+Z6b8e1eGCQoPdg== ------END AGE ENCRYPTED FILE-----
diff --git a/secrets/rabbit/restic/ctucxThings.age b/secrets/rabbit/restic/ctucxThings.age @@ -0,0 +1,12 @@ +-----BEGIN AGE ENCRYPTED FILE----- +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXZUdLOGowU3pkS1hFQWRz +LzczaHVzRm1DbEhxRy9SYU1CZ1diclhuR0NFCjJrMitYdTI5UGxhbjhTUmRLZStP +TGsyQ1d5ekNjdk9VUm9heTFPSDUxcjgKLT4gc3NoLWVkMjU1MTkgaGtMdUVnIHZJ +Um5oZ0Q2ZGNXUEYzQis2RFo5Vll1QTJiK3FKa3EzVEhHelFCRDBXQXMKaFlpaGdw +S3JiYU9mWE1vVm5KNTNjd3R2TTc3cGhtNk9sYUNOTndOWlUwOAotPiBRRHs/Zm5t +LWdyZWFzZSBrIDlHY1xoTwpkTmZRVXJTMldRV2pIUEd6MUVkdWFnOGUweXQyMVpV +cG9qZ2xQcGsKLS0tIGxyUklXSVUyNzJzeTE4UmJPeWVrZC9IclppMzhQMm0xemdD +c092WU9TZG8KCsSK1XGJxfWLArxj3fJXO10ui43U8AyHr+1mQJeo7p9RNTVsDWNs +tjVBCtyHAEI9JCiXQXQGdl3Mp0AQlwldGlbbPz+7iYHudl0KH5WRR3PSUnIgPALB +ZBkAyEFvQSU5Bg== +-----END AGE ENCRYPTED FILE-----