James/eve-psr-nix0
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Set up Atuin server and client

Browse Source
This commit is contained in:
James Eversole
2024-01-10 12:28:37 -06:00
parent 2ca6b54d9e
commit a2508935af
10 changed files with 79 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
nix/application/containers.nix
View File

@ -3,6 +3,25 @@
virtualisation.oci-containers = {
containers = {
atuin = {
image = "ghcr.io/atuinsh/atuin:latest";
ports = [ "8888:8888" ];
cmd = [ "server" "start" ];
volumes = [
"/home/sezycei/srv/containerdata/atuin/config:/config"
];
environmentFiles =
[ config.age.secrets.atuin-env.path ];
};
atuin-sql = {
image = "postgres:14";
volumes = [ "/home/sezycei/srv/containerdata/atuin/database:/var/lib/postgresql/data/" ];
ports = [ "9123:5432" ];
environmentFiles =
[ config.age.secrets.atuin-env.path ];
};
gitlab = {
image = "gitlab/gitlab-ce:latest";
ports = [ "26616:80" "26617:22" ];

1
nix/application/nginx.nix
View File

@ -44,6 +44,7 @@
};
in
{
"atuin.matri.cx" = proxied { target = "http://127.0.0.1:8888"; };
"cache.matri.cx" = proxiedLAN {
target = "http://${config.services.nix-serve.bindAddress}:${toString config.services.nix-serve.port}";
};

1
nix/system/age.nix
View File

@ -1,6 +1,7 @@
{ ... }: {
age = {
secrets = {
atuin-env.file = ../../secrets/atuin-env.age;
cache-key.file = ../../secrets/cache-key.age;
cridycei.file = ../../secrets/cridycei.age;
gitlab-runner.file = ../../secrets/gitlab-runner.age;

2
nix/system/network.nix
View File

@ -2,7 +2,7 @@
networking = {
hostName = "eve-psr-nix0";
firewall = {
allowedTCPPorts = [ 22 80 443 ];
allowedTCPPorts = [ 22 80 443 7860 ];
allowedUDPPorts = [ 22 80 443 53 1194 ];
trustedInterfaces = [ "tun0" ];
};

19
nix/system/system.nix
View File

@ -7,15 +7,18 @@
environment.systemPackages = with pkgs; [ git pciutils openvpn vim wget ];
programs.ssh.knownHosts = {
selbeiskami = {
hostNames = [ "192.168.0.57" ];
publicKey = "192.168.0.57 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBiTyWzAu7V2Jkk4rqEjBLu+lAhhkLTO8W/PGb8HkeqQ";
};
matricx = {
hostNames = [ "192.168.0.130" "matri.cx" ];
publicKey = "matri.cx ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMyaPYK0HcKAjrD1g+FPqPEU9FJ0I6+iKYmQlWKE0zHp";
programs = {
ssh.knownHosts = {
selbeiskami = {
hostNames = [ "192.168.0.57" ];
publicKey = "192.168.0.57 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBiTyWzAu7V2Jkk4rqEjBLu+lAhhkLTO8W/PGb8HkeqQ";
};
matricx = {
hostNames = [ "192.168.0.130" "matri.cx" ];
publicKey = "matri.cx ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMyaPYK0HcKAjrD1g+FPqPEU9FJ0I6+iKYmQlWKE0zHp";
};
};
zsh.enable = true;
};
time.timeZone = "America/Chicago";

3
nix/user/users.nix
View File

@ -7,7 +7,8 @@
isNormalUser = true;
passwordFile = config.age.secrets.sezycei.path;
extraGroups = [ "wheel" "nginx" ];
packages = with pkgs; [ bun byobu purescript stack tmux ];
packages = with pkgs; [ atuin bun byobu purescript stack tmux ];
shell = pkgs.zsh;
};
cridycei = {