Updates!

nix/application/containers.nix

@@ -23,7 +23,7 @@
       };
 
       gitea = {
-        image = "docker.io/gitea/gitea:1.24.0-rc0-rootless";
+        image = "docker.io/gitea/gitea:1.25.0-rootless";
         volumes = [ "/home/sezycei/srv/containerdata/gitea/data:/var/lib/gitea"
                     "/home/sezycei/srv/containerdata/gitea/config:/etc/gitea"
                   ];
@@ -146,7 +146,7 @@
       };
 
       vaultwarden = {
-        image = "vaultwarden/server:1.33.2";
+        image = "vaultwarden/server:1.34.3";
         ports = [ "40080:80" ];
         volumes = [
           "/home/sezycei/srv/containerdata/bitwarden/data:/data"

nix/application/nginx.nix

@@ -87,7 +87,6 @@
             proxy_set_header X-Request-Base "https://hydra.matri.cx";
           '';
         };
-        "jame.su" = static { dir = "/var/www/jame.su"; };
         "llm.matri.cx" = proxiedLAN { 
           target = "http://192.168.0.94:11434"; 
           extra = ''
@@ -102,7 +101,6 @@
         "purr.eversole.co" = proxied { target = "http://127.0.0.1:5195"; };
         "pw.eversole.co" = proxied { target = "http://127.0.0.1:40080"; };
         "sezycei.com" = static { dir = "/var/www/sezycei.com"; };
-        "snakebelmont.com" = static { dir = "/var/www/snakebelmont.com"; };
         "transmission.matri.cx" = proxiedLAN { target = "http://127.0.0.1:9091"; };
         "vpn.matri.cx" = {
           forceSSL = true;

nix/system/dns.nix

@@ -59,7 +59,7 @@
         }
       }
 
-      *.ycombinator.com {
+      news.ycombinator.com {
         template IN A  {
             answer "{{ .Name }} 0 IN A 127.0.0.1"
         }
@@ -70,6 +70,18 @@
             answer "{{ .Name }} 0 IN A 127.0.0.1"
         }
       }
+
+      4chan.org {
+        template IN A  {
+            answer "{{ .Name }} 0 IN A 127.0.0.1"
+        }
+      }
+
+      *.4chan.org {
+        template IN A  {
+            answer "{{ .Name }} 0 IN A 127.0.0.1"
+        }
+      }
     '';
   };
 }

nix/system/hardware.nix

@@ -32,7 +32,10 @@
     };
   };
 
-  swapDevices = [ ];
+  swapDevices = [{
+    device = "/swap";
+    size = (8 * 1024);
+  }];
 
   networking.useDHCP = lib.mkDefault true;
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";

nix/system/network.nix

@@ -2,8 +2,8 @@
   networking = {
     hostName = "eve-psr-nix0";
     firewall = {
-      allowedTCPPorts = [ 22 80 443 5000 23231 23232 23233 20443 ];
-      allowedUDPPorts = [ 53 51820 config.services.tailscale.port 20443 ];
+      allowedTCPPorts = [ 22 80 443 4242 5000 23231 23232 23233 20443 ];
+      allowedUDPPorts = [ 53 4242 51820 config.services.tailscale.port 20443 ];
       extraCommands = ''
         iptables -t nat -A POSTROUTING -s 100.64.0.0/10 -o enp1s0 -j MASQUERADE
       '';

nix/user/users.nix

@@ -2,22 +2,32 @@
   programs.bash.promptInit = ''
     PS1='\u@\h:\w\n-> '
   '';
-  users.users = {
-    sezycei = {
-      isNormalUser = true;
-      extraGroups = [ "wheel" "nginx" ];
-      packages = with pkgs; [ atuin bun byobu purescript stack tmux ];
-    };
+  users = {
+    users = {
+      sezycei = {
+        isNormalUser = true;
+        extraGroups = [ "wheel" "nginx" ];
+        packages = with pkgs; [ atuin bun byobu purescript stack tmux ];
+      };
 
-    cridycei = {
-      isNormalUser = true;
-      extraGroups = [ ];
-      packages = with pkgs; [ ];
-    };
+      cridycei = {
+        isNormalUser = true;
+        extraGroups = [ ];
+        packages = with pkgs; [ ];
+      };
 
-    torrent = {
-      isNormalUser = true;
-      homeMode = "770";
+      torrent = {
+        isNormalUser = true;
+        homeMode = "770";
+      };
+      reticulum = {
+        isSystemUser = true;
+        description = "Reticulum daemon user";
+        group = "reticulum";
+        home = "/var/lib/reticulum";
+        createHome = true;
+      };
     };
+    groups.reticulum = {};
   };
 }