greg/nixos
1
0
Fork 1
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Add minio to Genesis

Browse Source
This commit is contained in:
Greg Hellings
2024-04-03 08:32:31 -05:00
parent a43bd4acc9
commit c729a5497a
3 changed files with 66 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/genesis/networking.nix
+40 -31
View File
@@ -12,7 +12,7 @@ let
"10.42.1.2 opnsense router opnsense.thehellings.lan router.thehellings.lan"
"10.42.1.3 printer.thehellings.lan"
"10.42.1.4 chronicles chronicles.thehellings.lan nas.thehellings.lan"
"10.42.1.5 genesis genesis.thehellings.lan dns dns.thehellings.lan smart smart.thehellings.lan jellyfin jellyfin.thehellings.lan speedtest.thehellings.lan nixcache.thehellings.lan"
"10.42.1.5 genesis genesis.thehellings.lan dns dns.thehellings.lan smart smart.thehellings.lan jellyfin jellyfin.thehellings.lan speedtest.thehellings.lan nixcache.thehellings.lan gitcache.thehellings.lan"
"10.42.1.6 isaiah isaiah.thehellings.lan"
"10.42.1.7 hosea hosea.thehellings.lan"
"10.42.1.12 tv"
@@ -24,7 +24,7 @@ let
"100.88.91.27 dns.home"
"100.119.228.115 chronicles.home nas.home chronicles.shire-zebra.ts.net"
"100.115.57.8 linode.home"
"100.88.91.27 genesis.home jellyfin.home smart.home zwave.home nixcache.home"
"100.88.91.27 genesis.home jellyfin.home smart.home zwave.home nixcache.home gitcache.home"
"100.84.183.79 myself.home myself.shire-zebra.ts.net"
"100.78.226.76 gitlab.home gitlab.shire-zebra.ts.net gitlab.thehellings.lan registry.thehellings.lan git.thehellings.lan"
"100.68.203.1 hosea.home hosea.shire-zebra.ts.net"
@@ -212,35 +212,44 @@ in {
"jellyfin.home".target = "http://localhost:8096/";
};
services.nginx.virtualHosts."nixcache.thehellings.lan" = {
serverName = "nixcache.thehellings.lan";
serverAliases = [ "nixcache" "nixcache.home" ];
root = "/proxy";
locations = {
"~ ^/nix-cache-info" = {
proxyPass = "https://cache.nixos.org";
root = "/proxy/nix-cache-info/store";
recommendedProxySettings = false;
extraConfig = ''
error_log /var/log/nginx/proxy.log debug;
proxy_store on;
proxy_store_access user:rw group:rw all:r;
proxy_temp_path /proxy/nix-cache-info/temp;
proxy_pass_request_headers on;
proxy_set_header Host "cache.nixos.org";
'';
};
"~^/nar/.+$" = {
proxyPass = "https://cache.nixos.org";
root = "/proxy/nar/store";
recommendedProxySettings = false;
extraConfig = ''
proxy_store on;
proxy_store_access user:rw group:rw all:r;
proxy_temp_path /proxy/nar/temp;
proxy_pass_request_headers on;
proxy_set_header Host "cache.nixos.org";
'';
age.secrets.minio.file = ../../secrets/minio.age;
services = {
minio = {
enable = true;
dataDir = [ "/proxy/minio" ];
rootCredentialsFile = config.age.secrets.minio.path;
};
nginx.virtualHosts."nixcache.thehellings.lan" = {
serverName = "nixcache.thehellings.lan";
serverAliases = [ "nixcache" "nixcache.home" ];
root = "/proxy";
locations = {
"~ ^/nix-cache-info" = {
proxyPass = "https://cache.nixos.org";
root = "/proxy/nix-cache-info/store";
recommendedProxySettings = false;
extraConfig = ''
error_log /var/log/nginx/proxy.log debug;
proxy_store on;
proxy_store_access user:rw group:rw all:r;
proxy_temp_path /proxy/nix-cache-info/temp;
proxy_pass_request_headers on;
proxy_set_header Host "cache.nixos.org";
'';
};
"~^/nar/.+$" = {
proxyPass = "https://cache.nixos.org";
root = "/proxy/nar/store";
recommendedProxySettings = false;
extraConfig = ''
proxy_store on;
proxy_store_access user:rw group:rw all:r;
proxy_temp_path /proxy/nar/temp;
proxy_pass_request_headers on;
proxy_set_header Host "cache.nixos.org";
'';
};
};
};
};
secrets/minio.age
+25
View File
@@ -0,0 +1,25 @@
age-encryption.org/v1
-> ssh-ed25519 oyEmTw NqJKKavsCamqOVTJkOnOwhOw3dMglHh5r6DLo96j3U8
kBXy1EWteCFfB6PbweLLsMJsIhbWKHU/+KirnJz+ebU
-> ssh-ed25519 mOmPfg vRjffx2gfrqTEiOyNTGckaNdzAJClbMcfTjVcrbhkF8
oPF8ygbRXAR2QnYDRP797YKhS9wpVk1kDfLjwr14iPQ
-> ssh-ed25519 YJiRbw bweFe7HB6590RwGKEV9/fiAD+5UvoHFiFAL5+/2uDUw
C4JhGtLSRPKrHZ6JFADtC98/wvaTAZ8d9VDZr7XeY04
-> ssh-ed25519 aY2AXA A2GfspoHAbE3LdMR/2vSv/QUqVS9Q5vj/vsVdH4V5D8
RK+Dg1b58WKkB8PmunOElfe5GzJsrUSNNj/IXkcseYI
-> ssh-ed25519 xNtnoA E63AIYRrm6WUcZTWi4u4cMHTPAcJp7LcaXi8moDaAkg
qW7X5qFnT3xfUxfaTytIa02MRXYxfe4U7ODrfPBZX8A
-> ssh-ed25519 Nl/5yA WOF1gadhIv/BstNT9cS8px7rMgL8fFh1ruUbylfWOw4
d7MaFSkU8bVTdRhWWW29T31d9L6nJF9mWr47s04j+90
-> ssh-ed25519 GdLgCQ Ym+/QvFIyOWEM+7e4/PdLTFID3/ijq97oxmmVa/Y0T4
MJ2i/NyNhbL1rzPaTg5ax1XUl6Nwxo8dYwj9AoMxgrw
-> ssh-ed25519 tOH/HQ T99GmgP/1brLODBkod/wdvuYdss5ZNZdQSZd4+Tv+Us
Wqp3Hjn6nr3/wKjYLo8op5bEn2KG9OAOJoMUpsAPdg0
-> ssh-ed25519 FpzvfQ /X5yKM1ZWDigKSDjdqYRwn88X8Vvd9rl3iCX7KJa824
2UOjxl5EOF3HRcz0qzAwKev1YHsLAIZjZK6rS8WpzVw
-> ssh-ed25519 kdPvzQ ggw0vhaoJ8hAyS2BEzGNhxWUHQhDDhBJNcz+NK8tdxc
8wSij9YSOoTLxs74QfqdAoKCVXv2pHn3GREp7DR4fNc
-> ssh-ed25519 onmXpg GpSqblqZfGU8T6OEWnjjvIiJDrbof1ATs0u5paT1a0c
RSbN0/4suxvrNFg1aKT8lEsVnlA5UfxC0kVY1SaWX5s
--- IdYna1QpVSf2RdSFtgxpEQjExYm9Oq1pgtLSibXaBqc
£)!0|°!E÷ÆcmµêòP¥;£6…{"o}2‚ùúgdÄìò^ä¤zÆ}u:‹½P`¼_`GQèQ^$I]@á†Teí "\!¶ñÏæ.àÁ ‚��Õ
secrets/secrets.nix
+1
View File
@@ -41,6 +41,7 @@ in
"linode-forgejo-runner.age".publicKeys = everyone;
"jude-forgejo-runner.age".publicKeys = everyone;
"minio.age".publicKeys = everyone;
"dendrite.age".publicKeys = everyone;