Add minio to Genesis

hosts/genesis/networking.nix

@@ -12,7 +12,7 @@ let
 		"10.42.1.2 opnsense router opnsense.thehellings.lan router.thehellings.lan"
 		"10.42.1.3 printer.thehellings.lan"
 		"10.42.1.4 chronicles chronicles.thehellings.lan nas.thehellings.lan"
-		"10.42.1.5 genesis genesis.thehellings.lan dns dns.thehellings.lan smart smart.thehellings.lan jellyfin jellyfin.thehellings.lan speedtest.thehellings.lan nixcache.thehellings.lan"
+		"10.42.1.5 genesis genesis.thehellings.lan dns dns.thehellings.lan smart smart.thehellings.lan jellyfin jellyfin.thehellings.lan speedtest.thehellings.lan nixcache.thehellings.lan gitcache.thehellings.lan"
 		"10.42.1.6 isaiah isaiah.thehellings.lan"
 		"10.42.1.7 hosea hosea.thehellings.lan"
 		"10.42.1.12 tv"
@@ -24,7 +24,7 @@ let
 		"100.88.91.27 dns.home"
 		"100.119.228.115 chronicles.home nas.home chronicles.shire-zebra.ts.net"
 		"100.115.57.8 linode.home"
-		"100.88.91.27 genesis.home jellyfin.home smart.home zwave.home nixcache.home"
+		"100.88.91.27 genesis.home jellyfin.home smart.home zwave.home nixcache.home gitcache.home"
 		"100.84.183.79 myself.home myself.shire-zebra.ts.net"
 		"100.78.226.76 gitlab.home gitlab.shire-zebra.ts.net gitlab.thehellings.lan registry.thehellings.lan git.thehellings.lan"
 		"100.68.203.1 hosea.home hosea.shire-zebra.ts.net"
@@ -212,35 +212,44 @@ in {
 		"jellyfin.home".target = "http://localhost:8096/";
 	};
 
-	services.nginx.virtualHosts."nixcache.thehellings.lan" = {
+	age.secrets.minio.file = ../../secrets/minio.age;
-		serverName = "nixcache.thehellings.lan";
+
-		serverAliases = [ "nixcache" "nixcache.home" ];
+	services = {
-		root = "/proxy";
+		minio = {
-		locations = {
+			enable = true;
-			"~ ^/nix-cache-info" = {
+			dataDir = [ "/proxy/minio" ];
-				proxyPass = "https://cache.nixos.org";
+			rootCredentialsFile = config.age.secrets.minio.path;
-				root = "/proxy/nix-cache-info/store";
+		};
-				recommendedProxySettings = false;
+		nginx.virtualHosts."nixcache.thehellings.lan" = {
-				extraConfig = ''
+			serverName = "nixcache.thehellings.lan";
-					error_log /var/log/nginx/proxy.log debug;
+			serverAliases = [ "nixcache" "nixcache.home" ];
-					proxy_store on;
+			root = "/proxy";
-					proxy_store_access user:rw group:rw all:r;
+			locations = {
-					proxy_temp_path /proxy/nix-cache-info/temp;
+				"~ ^/nix-cache-info" = {
-					proxy_pass_request_headers on;
+					proxyPass = "https://cache.nixos.org";
-					proxy_set_header Host "cache.nixos.org";
+					root = "/proxy/nix-cache-info/store";
-				'';
+					recommendedProxySettings = false;
-			};
+					extraConfig = ''
-			"~^/nar/.+$" = {
+						error_log /var/log/nginx/proxy.log debug;
-				proxyPass = "https://cache.nixos.org";
+						proxy_store on;
-				root = "/proxy/nar/store";
+						proxy_store_access user:rw group:rw all:r;
-				recommendedProxySettings = false;
+						proxy_temp_path /proxy/nix-cache-info/temp;
-				extraConfig = ''
+						proxy_pass_request_headers on;
-					proxy_store on;
+						proxy_set_header Host "cache.nixos.org";
-					proxy_store_access user:rw group:rw all:r;
+					'';
-					proxy_temp_path /proxy/nar/temp;
+				};
-					proxy_pass_request_headers on;
+				"~^/nar/.+$" = {
-					proxy_set_header Host "cache.nixos.org";
+					proxyPass = "https://cache.nixos.org";
-				'';
+					root = "/proxy/nar/store";
+					recommendedProxySettings = false;
+					extraConfig = ''
+						proxy_store on;
+						proxy_store_access user:rw group:rw all:r;
+						proxy_temp_path /proxy/nar/temp;
+						proxy_pass_request_headers on;
+						proxy_set_header Host "cache.nixos.org";
+					'';
+				};
 			};
 		};
 	};

secrets/minio.age

@@ -0,0 +1,25 @@
+age-encryption.org/v1
+-> ssh-ed25519 oyEmTw NqJKKavsCamqOVTJkOnOwhOw3dMglHh5r6DLo96j3U8
+kBXy1EWteCFfB6PbweLLsMJsIhbWKHU/+KirnJz+ebU
+-> ssh-ed25519 mOmPfg vRjffx2gfrqTEiOyNTGckaNdzAJClbMcfTjVcrbhkF8
+oPF8ygbRXAR2QnYDRP797YKhS9wpVk1kDfLjwr14iPQ
+-> ssh-ed25519 YJiRbw bweFe7HB6590RwGKEV9/fiAD+5UvoHFiFAL5+/2uDUw
+C4JhGtLSRPKrHZ6JFADtC98/wvaTAZ8d9VDZr7XeY04
+-> ssh-ed25519 aY2AXA A2GfspoHAbE3LdMR/2vSv/QUqVS9Q5vj/vsVdH4V5D8
+RK+Dg1b58WKkB8PmunOElfe5GzJsrUSNNj/IXkcseYI
+-> ssh-ed25519 xNtnoA E63AIYRrm6WUcZTWi4u4cMHTPAcJp7LcaXi8moDaAkg
+qW7X5qFnT3xfUxfaTytIa02MRXYxfe4U7ODrfPBZX8A
+-> ssh-ed25519 Nl/5yA WOF1gadhIv/BstNT9cS8px7rMgL8fFh1ruUbylfWOw4
+d7MaFSkU8bVTdRhWWW29T31d9L6nJF9mWr47s04j+90
+-> ssh-ed25519 GdLgCQ Ym+/QvFIyOWEM+7e4/PdLTFID3/ijq97oxmmVa/Y0T4
+MJ2i/NyNhbL1rzPaTg5ax1XUl6Nwxo8dYwj9AoMxgrw
+-> ssh-ed25519 tOH/HQ T99GmgP/1brLODBkod/wdvuYdss5ZNZdQSZd4+Tv+Us
+Wqp3Hjn6nr3/wKjYLo8op5bEn2KG9OAOJoMUpsAPdg0
+-> ssh-ed25519 FpzvfQ /X5yKM1ZWDigKSDjdqYRwn88X8Vvd9rl3iCX7KJa824
+2UOjxl5EOF3HRcz0qzAwKev1YHsLAIZjZK6rS8WpzVw
+-> ssh-ed25519 kdPvzQ ggw0vhaoJ8hAyS2BEzGNhxWUHQhDDhBJNcz+NK8tdxc
+8wSij9YSOoTLxs74QfqdAoKCVXv2pHn3GREp7DR4fNc
+-> ssh-ed25519 onmXpg GpSqblqZfGU8T6OEWnjjvIiJDrbof1ATs0u5paT1a0c
+RSbN0/4suxvrNFg1aKT8lEsVnlA5UfxC0kVY1SaWX5s
+--- IdYna1QpVSf2RdSFtgxpEQjExYm9Oq1pgtLSibXaBqc
+£)!0|°!E÷ÆcmµêòP¥;£6…{"o}2‚ùúgdÄìò^ä¤zÆ}u:‹½P`¼_`GQèQ^$I]@á†Teí "\!¶ñÏæ.àÁ ‚��Õ	

secrets/secrets.nix

@@ -41,6 +41,7 @@ in
 
 	"linode-forgejo-runner.age".publicKeys = everyone;
 	"jude-forgejo-runner.age".publicKeys = everyone;
+	"minio.age".publicKeys = everyone;
 
 
 	"dendrite.age".publicKeys = everyone;