mirror of
https://github.com/Nickiel12/nicks-nix-config.git
synced 2024-11-24 13:45:29 -08:00
Compare commits
7 commits
804c9fe070
...
a7b22a413f
Author | SHA1 | Date | |
---|---|---|---|
a7b22a413f | |||
fb6bd3c116 | |||
732e003413 | |||
e0e2c31f56 | |||
be8777af35 | |||
4ce4b54b4f | |||
f7d70845e8 |
5 changed files with 39 additions and 7 deletions
|
@ -9,6 +9,7 @@
|
||||||
./configuration.nix
|
./configuration.nix
|
||||||
./hardware-configuration.nix
|
./hardware-configuration.nix
|
||||||
./modules/dnsmasq.nix
|
./modules/dnsmasq.nix
|
||||||
|
./modules/firewall.nix
|
||||||
./modules/forgejo.nix
|
./modules/forgejo.nix
|
||||||
./modules/headscale.nix
|
./modules/headscale.nix
|
||||||
./modules/msmtp.nix
|
./modules/msmtp.nix
|
||||||
|
@ -74,10 +75,6 @@
|
||||||
# Lazy IPv6 connectivity for the container
|
# Lazy IPv6 connectivity for the container
|
||||||
enableIPv6 = true;
|
enableIPv6 = true;
|
||||||
};
|
};
|
||||||
firewall = {
|
|
||||||
enable = true;
|
|
||||||
allowedTCPPorts = [80 443 3001 5432]; # port 3001 opened to allow git traffic on the local netword
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
|
|
||||||
services.jellyfin = {
|
services.jellyfin = {
|
||||||
|
|
18
hosts/Alaska/modules/firewall.nix
Normal file
18
hosts/Alaska/modules/firewall.nix
Normal file
|
@ -0,0 +1,18 @@
|
||||||
|
{ config, pkgs, ...}:
|
||||||
|
|
||||||
|
let
|
||||||
|
in
|
||||||
|
{
|
||||||
|
networking.firewall = {
|
||||||
|
enable = true;
|
||||||
|
allowedTCPPorts = [80 443 5432];
|
||||||
|
|
||||||
|
extraCommands = with pkgs.lib; ''
|
||||||
|
# ${pkgs.nftables}/bin/nft -f - <<EOF
|
||||||
|
|
||||||
|
# EOF
|
||||||
|
# Already handled by tailscale in ts-input
|
||||||
|
# ${pkgs.nftables}/bin/nft insert rule filter nixos-fw ip saddr 100.64.0.0-100.64.255.255 iifname "enp2s0" counter jump nixos-fw-log-refuse
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
}
|
|
@ -7,6 +7,10 @@ let
|
||||||
};
|
};
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
|
networking.firewall = {
|
||||||
|
allowedTCPPorts = [3001];
|
||||||
|
};
|
||||||
|
|
||||||
system.activationScripts.copyStuff = "cp -r ${../../../rsrcs/giteaCustomDir}/. /Aurora/Forgejo/custom";
|
system.activationScripts.copyStuff = "cp -r ${../../../rsrcs/giteaCustomDir}/. /Aurora/Forgejo/custom";
|
||||||
system.activationScripts.copyTheme = "mkdir -p /Aurora/Forgejo/custom/public/assets/css && cp ${palenight}/dist/theme-palenight.css /Aurora/Forgejo/custom/public/assets/css/";
|
system.activationScripts.copyTheme = "mkdir -p /Aurora/Forgejo/custom/public/assets/css && cp ${palenight}/dist/theme-palenight.css /Aurora/Forgejo/custom/public/assets/css/";
|
||||||
|
|
||||||
|
|
|
@ -16,8 +16,8 @@ in
|
||||||
sync_frequency = "20m";
|
sync_frequency = "20m";
|
||||||
sync_address = if (hostname == "Alaska") then "http://127.0.0.1:8910"
|
sync_address = if (hostname == "Alaska") then "http://127.0.0.1:8910"
|
||||||
else "https://atuin.nickiel.net";
|
else "https://atuin.nickiel.net";
|
||||||
# filter_mode = "global" | "host" | "session" | "directory"
|
filter_mode = "session"; #"global" | "host" | "session" | "directory"
|
||||||
inline_height = 40;
|
inline_height = 10;
|
||||||
show_preview = true;
|
show_preview = true;
|
||||||
show_help = true;
|
show_help = true;
|
||||||
exit_mode = "return-query";
|
exit_mode = "return-query";
|
||||||
|
|
|
@ -19,6 +19,10 @@ in
|
||||||
mapleader = " ";
|
mapleader = " ";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
filetype.extension = {
|
||||||
|
templ = "templ";
|
||||||
|
};
|
||||||
|
|
||||||
options = {
|
options = {
|
||||||
autoindent = true;
|
autoindent = true;
|
||||||
expandtab = true;
|
expandtab = true;
|
||||||
|
@ -165,7 +169,13 @@ in
|
||||||
enable = true;
|
enable = true;
|
||||||
installLanguageServer = true;
|
installLanguageServer = true;
|
||||||
};
|
};
|
||||||
|
templ = {
|
||||||
|
enable = true;
|
||||||
|
autostart = true;
|
||||||
|
installLanguageServer = true;
|
||||||
|
};
|
||||||
html.enable = true;
|
html.enable = true;
|
||||||
|
tsserver.enable = true;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
@ -186,7 +196,10 @@ in
|
||||||
ensureInstalled = [
|
ensureInstalled = [
|
||||||
"rust"
|
"rust"
|
||||||
"toml"
|
"toml"
|
||||||
"lua"
|
"templ"
|
||||||
|
"go"
|
||||||
|
"html"
|
||||||
|
"json"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
rainbow-delimiters.enable = true;
|
rainbow-delimiters.enable = true;
|
||||||
|
|
Loading…
Reference in a new issue