lyes/nixfiles
1
0
Fork 0
Code Issues Pull requests Activity Actions

Adding lanayru

Browse source
This commit is contained in:
Lyes Saadi 2026-01-17 10:45:42 +01:00
parent 34a686c562
commit 5e22d64d04
Signed by: lyes
GPG key ID: 55A1D803917CF39A
9 changed files with 90 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

30
flake.lock generated
View file

@ -209,11 +209,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1768068402, "lastModified": 1768434960,
"narHash": "sha256-bAXnnJZKJiF7Xr6eNW6+PhBf1lg2P1aFUO9+xgWkXfA=", "narHash": "sha256-cJbFn17oyg6qAraLr+NVeNJrXsrzJdrudkzI4H2iTcg=",
"owner": "nix-community", "owner": "nix-community",
"repo": "home-manager", "repo": "home-manager",
"rev": "8bc5473b6bc2b6e1529a9c4040411e1199c43b4c", "rev": "b4d88c9ac42ae1a745283f6547701da43b6e9f9b",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -299,11 +299,11 @@
}, },
"nixos-hardware": { "nixos-hardware": {
"locked": { "locked": {
"lastModified": 1767185284, "lastModified": 1768397375,
"narHash": "sha256-ljDBUDpD1Cg5n3mJI81Hz5qeZAwCGxon4kQW3Ho3+6Q=", "narHash": "sha256-7QqbFi3ERvKjEdAzEYPv7iSGwpUKSrQW5wPLMFq45AQ=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixos-hardware", "repo": "nixos-hardware",
"rev": "40b1a28dce561bea34858287fbb23052c3ee63fe", "rev": "efe2094529d69a3f54892771b6be8ee4a0ebef0f",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -347,11 +347,11 @@
}, },
"nixpkgs-unstable": { "nixpkgs-unstable": {
"locked": { "locked": {
"lastModified": 1768127708, "lastModified": 1768305791,
"narHash": "sha256-1Sm77VfZh3mU0F5OqKABNLWxOuDeHIlcFjsXeeiPazs=", "narHash": "sha256-AIdl6WAn9aymeaH/NvBj0H9qM+XuAuYbGMZaP0zcXAQ=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "ffbc9f8cbaacfb331b6017d5a5abb21a492c9a38", "rev": "1412caf7bf9e660f2f962917c14b1ea1c3bc695e",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -379,11 +379,11 @@
}, },
"nixpkgs_3": { "nixpkgs_3": {
"locked": { "locked": {
"lastModified": 1768127708, "lastModified": 1768305791,
"narHash": "sha256-1Sm77VfZh3mU0F5OqKABNLWxOuDeHIlcFjsXeeiPazs=", "narHash": "sha256-AIdl6WAn9aymeaH/NvBj0H9qM+XuAuYbGMZaP0zcXAQ=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "ffbc9f8cbaacfb331b6017d5a5abb21a492c9a38", "rev": "1412caf7bf9e660f2f962917c14b1ea1c3bc695e",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -496,11 +496,11 @@
"nixpkgs": "nixpkgs_4" "nixpkgs": "nixpkgs_4"
}, },
"locked": { "locked": {
"lastModified": 1768183082, "lastModified": 1768379550,
"narHash": "sha256-XsiMOsqRLfmUi+24F7adhb/GAM2dMvplzwaW2Wxg/lo=", "narHash": "sha256-z94S29l5V86h11LZbPIMbHTJyksDG63aqISsZkTTuJY=",
"owner": "0xc000022070", "owner": "0xc000022070",
"repo": "zen-browser-flake", "repo": "zen-browser-flake",
"rev": "cdbc300fd89d503a95d1c8564de31a93d7b0a0ae", "rev": "06f61b4e4f4f6ba8027c96a5611c63dc0db12b90",
"type": "github" "type": "github"
}, },
"original": { "original": {

1
hosts/zora/default.nix
View file

@ -21,6 +21,7 @@
../../modules/server/biggoron/runner.nix ../../modules/server/biggoron/runner.nix
../../modules/server/giovanni ../../modules/server/giovanni
../../modules/server/kalif ../../modules/server/kalif
../../modules/server/lanayru
../../modules/server/link ../../modules/server/link
../../modules/server/maistro ../../modules/server/maistro
../../modules/server/mikau ../../modules/server/mikau

2
hosts/zora/networking.nix
View file

@ -85,7 +85,7 @@
restrictedServices = [ restrictedServices = [
"qbittorrent" "qbittorrent"
# "suwayomi-server" "suwayomi-server"
]; ];
portForwarding = { portForwarding = {

18
hosts/zora/reverse-proxy.nix
View file

@ -50,6 +50,12 @@
proxyWebsockets = true; proxyWebsockets = true;
}; };
}; };
# 44312
"dl.manga.lyes.eu" = {
forceSSL = true;
enableACME = true;
locations."/".proxyPass = "http://${config.networking.vpn-netns.vethIP}:${toString config.services.suwayomi-server.settings.server.port}";
};
# 44303 # 44303
"git.lyes.eu" = { "git.lyes.eu" = {
forceSSL = true; forceSSL = true;
@ -85,12 +91,12 @@
enableACME = true; enableACME = true;
locations."/" = { locations."/" = {
proxyPass = "http://${config.networking.vpn-netns.vethIP}:${toString config.services.qbittorrent.webuiPort}"; proxyPass = "http://${config.networking.vpn-netns.vethIP}:${toString config.services.qbittorrent.webuiPort}";
extraConfig = '' # extraConfig = ''
proxy_set_header Host $host; # proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; # proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme; # proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
''; # '';
}; };
}; };

1
modules/server/README.md
View file

@ -3,6 +3,7 @@
- `giovanni` : Vaultwarden (`vault.lyes.eu`) - `giovanni` : Vaultwarden (`vault.lyes.eu`)
- `kaepora` : PostgreSQL - `kaepora` : PostgreSQL
- `kalif` : Factorio (`factorio.lyes.eu`) - `kalif` : Factorio (`factorio.lyes.eu`)
- `lanayru` : Suwayomi (`dl.manga.lyes.eu`)
- `link` : Kanidm (`auth.lyes.eu`) - `link` : Kanidm (`auth.lyes.eu`)
- `maistro` : Incus - `maistro` : Incus
- `mikau` : Jellyfin (`media.lyes.eu`) - `mikau` : Jellyfin (`media.lyes.eu`)

43
modules/server/lanayru/default.nix Normal file
View file

@ -0,0 +1,43 @@
{ config, pkgs, ... }:
{
services.suwayomi-server = {
enable = true;
package = pkgs.suwayomi-server;
user = "suwayomi";
group = "media";
openFirewall = true;
dataDir = "/var/data/manga";
settings = {
server = {
ip = "0.0.0.0";
port = 44312;
extensionRepos = [
"https://raw.githubusercontent.com/keiyoushi/extensions/repo/index.min.json"
];
downloadAsCbz = true;
basicAuthEnabled = true;
basicAuthUsername = "lyes";
basicAuthPasswordFile = config.age.secrets.suwayomi-pass.path;
# backupPath = "/unv/backups/suwayomi";
# backupTime = "07:11";
localSourcePath = "/var/data/manga/local";
};
};
};
age.secrets = {
suwayomi-pass = {
file = ../../../secrets/zora/services/lanayru-pass.age;
owner = config.services.suwayomi-server.user;
};
};
}

18
modules/server/taf/default.nix
View file

@ -76,15 +76,6 @@
elsif header :contains "List-Id" "<ca.lists.crans.org>" { elsif header :contains "List-Id" "<ca.lists.crans.org>" {
fileinto :create "Crans.crans.ca"; fileinto :create "Crans.crans.ca";
} }
# Crans Nounou
elsif anyof (
header :contains "List-Id" "<nounou.lists.crans.org>",
header :contains "List-Id" "<apprenti-es.lists.crans.org>",
address :is :all "To" "contact@crans.org",
address :is :all "From" "contact@crans.org"
) {
fileinto :create "Crans.crans.nounou";
}
# Crans Root Postmaster # Crans Root Postmaster
elsif address :is :all "To" "postmaster@crans.org" { elsif address :is :all "To" "postmaster@crans.org" {
addflag "\\Seen"; addflag "\\Seen";
@ -94,6 +85,15 @@
elsif address :is :all "From" "MAILER-DAEMON@crans.org" { elsif address :is :all "From" "MAILER-DAEMON@crans.org" {
fileinto :create "Crans.crans.root.mailer"; fileinto :create "Crans.crans.root.mailer";
} }
# Crans Nounou
elsif anyof (
header :contains "List-Id" "<nounou.lists.crans.org>",
header :contains "List-Id" "<apprenti-es.lists.crans.org>",
address :is :all "To" "contact@crans.org",
address :is :all "From" "contact@crans.org"
) {
fileinto :create "Crans.crans.nounou";
}
# Crans Root # Crans Root
elsif anyof ( elsif anyof (
address :is :all "To" "root@crans.org", address :is :all "To" "root@crans.org",

1
secrets.nix
View file

@ -24,4 +24,5 @@ in
"secrets/zora/services/ptigoron-token.age".publicKeys = all; "secrets/zora/services/ptigoron-token.age".publicKeys = all;
"secrets/zora/services/mogma-privatekey.age".publicKeys = all; "secrets/zora/services/mogma-privatekey.age".publicKeys = all;
"secrets/zora/services/tetra-pass.age".publicKeys = all; "secrets/zora/services/tetra-pass.age".publicKeys = all;
"secrets/zora/services/lanayru-pass.age".publicKeys = all;
} }

7
secrets/zora/services/lanayru-pass.age Normal file
View file

@ -0,0 +1,7 @@
age-encryption.org/v1
-> ssh-ed25519 whuRpQ E5HLHN2hIqlA7O/JAtLc0T7DU/DtN+VISIj18JuRFxo
4PcTQNEOcKf/35I4te8wy9v3FG7rwwRgHrrFTNM8kDU
-> ssh-ed25519 TFqgIg 4RJdWYN7h/GBR1CClnnl2cNIoDsm8llZj7krWFDKujc
22oJsAKIAh7qUxulswCmVyvh/S+nZCcw/jsh7Uh8xoA
--- 7ct9JACAjyTcGAbvkib3oROmyciIVjrHDGuqBANfbn8
f/ð¢.ÛÓˆ¥ÐŒSP‹v¯ò”BëLMÞ:K㇄KãÊÊúæÙßÕ¸¸TW<54>•1‚È1Å3<>‡o¶üA