katja's git: nixfiles

ctucx' nixfiles

commit f54166578012cf3e8d57d3877797a9d003cff36e
parent 5aff77a45dcb32d360417b6b1a9d6671e1c16650
Author: Katja (ctucx) <git@ctu.cx>
Date: Thu, 24 Apr 2025 13:58:18 +0200

configurations/nixos/websites: move things to `katja.wtf` domain and node `rabbit`
6 files changed, 42 insertions(+), 42 deletions(-)
diff --git a/configurations/nixos/websites/things.ctu.cx.nix b/configurations/nixos/websites/things.ctu.cx.nix
@@ -1,29 +0,0 @@
-{ inputs, secrets, config, pkgs, lib, ... }:
-
-{
-
-  dns.zones."ctu.cx".subdomains."things".CNAME = [ "${config.networking.fqdn}." ];
-
-  age.secrets.resticCtucxThings.file = secrets."${config.networking.hostName}".restic.ctucxThings;
-
-  restic-backups.ctucx-things = {
-    user         = "ctucx-things";
-    passwordFile = config.age.secrets.resticCtucxThings.path;
-    paths        = [ "/var/lib/ctucx-things" ];
-  };
-
-  services.ctucx-things = {
-    enable       = true;
-    storagePath  = "/var/lib/ctucx-things";
-    nginx.enable = true;
-    nginx.domain = "things.ctu.cx";
-  };
-
-  services.nginx.virtualHosts."things.ctu.cx" = {
-    useACMEHost = "${config.networking.fqdn}";
-    forceSSL    = true;
-    kTLS        = true;
-  };
-
-}
-
diff --git a/configurations/nixos/websites/things.katja.wtf.nix b/configurations/nixos/websites/things.katja.wtf.nix
@@ -0,0 +1,29 @@
+{ inputs, secrets, config, pkgs, lib, ... }:
+
+{
+
+  dns.zones."katja.wtf".subdomains."things".CNAME = [ "${config.networking.fqdn}." ];
+
+  age.secrets.resticCtucxThings.file = secrets."${config.networking.hostName}".restic.ctucxThings;
+
+  restic-backups.ctucx-things = {
+    user         = "ctucx-things";
+    passwordFile = config.age.secrets.resticCtucxThings.path;
+    paths        = [ "/var/lib/ctucx-things" ];
+  };
+
+  services.ctucx-things = {
+    enable       = true;
+    storagePath  = "/var/lib/ctucx-things";
+    nginx.enable = true;
+    nginx.domain = "things.katja.wtf";
+  };
+
+  services.nginx.virtualHosts."things.katja.wtf" = {
+    useACMEHost = "${config.networking.fqdn}";
+    forceSSL    = true;
+    kTLS        = true;
+  };
+
+}
+
diff --git a/nodes/hector/default.nix b/nodes/hector/default.nix
@@ -27,7 +27,6 @@
 
       # website / webservices
       ctucxConfig.websites."ctu.cx"
-      ctucxConfig.websites."things.ctu.cx"
       ctucxConfig.websites."bikemap.ctu.cx"
       ctucxConfig.websites."grocy.ctu.cx"
 
diff --git a/nodes/rabbit/default.nix b/nodes/rabbit/default.nix
@@ -30,6 +30,7 @@
 
       # website / webservices
       ctucxConfig.websites."oeffi.katja.wtf"
+      ctucxConfig.websites."things.katja.wtf"
     ];
 
     home-manager.users.katja.imports = [
diff --git a/secrets/hector/restic/ctucxThings.age b/secrets/hector/restic/ctucxThings.age
@@ -1,12 +0,0 @@
------BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWRXlqWkQzQ09hVHVjemla
-WmpIaWVaS21lYXA4T25xa2hONVFDQ0tVZjFFCk5BQnY1VWJGYmZDOHlhVnFEY2c1
-UHpuci9oNlRuam1LTUVHNzFESmV3L3cKLT4gc3NoLWVkMjU1MTkgeWFMSFNRIHpO
-K3VDRUVndHp0dnlGTFdIbTlNR0xWcmw0SU9oRXR0a3NhbGhjVTRDeEUKcURUbFhE
-by90SEVubU1rRUhKK1kyQkE4U3B3VVVIUFNXaVFJeEsxNFBWMAotPiAjLWdyZWFz
-ZSBEWGNCPl5nawpiSDY5bUdIZUJwTWxJMktEWWVtWmVmMVhvN0lneElvWXl1TzBC
-VEJGQURtWjRqL2JYZm0zSXBBCi0tLSBDcHZtM2pTbHJpNFhyRDg2ZUovQ0loTzUw
-WHJjbnpIZkMrUE9TaTFpeGo4CjgsRbhemea4uaQxbwupDR7A0yiR0X0VnpybisnM
-nOxjdwy3/rA1ADzS/Az4N1xgux08hpGkoVi60hDyiFLTC9b7UKcHfS12GpUXMZPA
-n05MLDhDLJu+Z6b8e1eGCQoPdg==
------END AGE ENCRYPTED FILE-----
diff --git a/secrets/rabbit/restic/ctucxThings.age b/secrets/rabbit/restic/ctucxThings.age
@@ -0,0 +1,12 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXZUdLOGowU3pkS1hFQWRz
+LzczaHVzRm1DbEhxRy9SYU1CZ1diclhuR0NFCjJrMitYdTI5UGxhbjhTUmRLZStP
+TGsyQ1d5ekNjdk9VUm9heTFPSDUxcjgKLT4gc3NoLWVkMjU1MTkgaGtMdUVnIHZJ
+Um5oZ0Q2ZGNXUEYzQis2RFo5Vll1QTJiK3FKa3EzVEhHelFCRDBXQXMKaFlpaGdw
+S3JiYU9mWE1vVm5KNTNjd3R2TTc3cGhtNk9sYUNOTndOWlUwOAotPiBRRHs/Zm5t
+LWdyZWFzZSBrIDlHY1xoTwpkTmZRVXJTMldRV2pIUEd6MUVkdWFnOGUweXQyMVpV
+cG9qZ2xQcGsKLS0tIGxyUklXSVUyNzJzeTE4UmJPeWVrZC9IclppMzhQMm0xemdD
+c092WU9TZG8KCsSK1XGJxfWLArxj3fJXO10ui43U8AyHr+1mQJeo7p9RNTVsDWNs
+tjVBCtyHAEI9JCiXQXQGdl3Mp0AQlwldGlbbPz+7iYHudl0KH5WRR3PSUnIgPALB
+ZBkAyEFvQSU5Bg==
+-----END AGE ENCRYPTED FILE-----