nixbld-etc-nixos/configuration.nix

@@ -9,6 +9,7 @@
     [ # Include the results of the hardware scan.
       ./hardware-configuration.nix
       ./homu/nixos-module.nix
+      ./notifico/nixos-module.nix
     ];
 
   # Use the systemd-boot EFI boot loader.
@@ -69,11 +70,11 @@
   users.extraGroups.plugdev = { };
   users.extraUsers.sb = {
     isNormalUser = true;
-    extraGroups = ["wheel" "plugdev" "dialout" "lp" "scanner" "wireshark" "docker"];
+    extraGroups = ["wheel" "plugdev" "dialout" "lp" "scanner" "wireshark"];
   };
   users.extraUsers.rj = {
     isNormalUser = true;
-    extraGroups = ["wheel" "plugdev" "dialout" "wireshark" "docker"];
+    extraGroups = ["wheel" "plugdev" "dialout" "wireshark"];
   };
   users.extraUsers.astro = {
     isNormalUser = true;
@@ -155,7 +156,6 @@ ACTION=="add", SUBSYSTEM=="tty", \
   nix.sandboxPaths = ["/opt"];
 
   virtualisation.libvirtd.enable = true;
-  virtualisation.docker.enable = true;
 
   services.gitea = {
     enable = true;
@@ -195,7 +195,6 @@ ACTION=="add", SUBSYSTEM=="tty", \
         "lab.m-labs.hk" = null;
         "git.m-labs.hk" = null;
         "chat.m-labs.hk" = null;
-        "hooks.m-labs.hk" = null;
       };
     };
   };
@@ -249,6 +248,11 @@ ACTION=="add", SUBSYSTEM=="tty", \
           uwsgi_pass unix:${config.services.uwsgi.runDir}/uwsgi.sock;
         '';
       };
+      "notifico.m-labs.hk" = {
+        forceSSL = true;
+        useACMEHost = "notifico.m-labs.hk";
+        locations."/".proxyPass = "http://127.0.0.1:5000";
+      };
     };
   };
   services.uwsgi = {
@@ -267,6 +271,11 @@ ACTION=="add", SUBSYSTEM=="tty", \
     config = "/etc/nixos/secret/homu.toml";
   };
 
+  services.notifico = {
+    enable = true;
+    config = "/etc/nixos/secret/notifico.py";
+  };
+
   # This value determines the NixOS release with which your system is to be
   # compatible, in order to avoid breaking some software such as database
   # servers. You should change this only after NixOS release notes say you