M-Labs
/
nix-scripts
9
0
Fork 9
Code Issues 6 Pull Requests Releases Wiki Activity

Compare commits

base: M-Labs:4b78fb81244864bcc10639b8b9c3102cd9f1fc15
Branches Tags
M-Labs:master
..
compare: M-Labs:b91e17ea7833541d220d4bcb331539ccd3857c0e
Branches Tags
M-Labs:master

No commits in common. "4b78fb81244864bcc10639b8b9c3102cd9f1fc15" and "b91e17ea7833541d220d4bcb331539ccd3857c0e" have entirely different histories.
4b78fb8124 ... b91e17ea78

1 changed files with 13 additions and 4 deletions
Show Stats Expand all files Collapse all files

17
nixbld-etc-nixos/configuration.nix
View File

@ -9,6 +9,7 @@
[ # Include the results of the hardware scan. [ # Include the results of the hardware scan.
./hardware-configuration.nix ./hardware-configuration.nix
./homu/nixos-module.nix ./homu/nixos-module.nix
./notifico/nixos-module.nix
]; ];
# Use the systemd-boot EFI boot loader. # Use the systemd-boot EFI boot loader.
@ -69,11 +70,11 @@
users.extraGroups.plugdev = { }; users.extraGroups.plugdev = { };
users.extraUsers.sb = { users.extraUsers.sb = {
isNormalUser = true; isNormalUser = true;
extraGroups = ["wheel" "plugdev" "dialout" "lp" "scanner" "wireshark" "docker"]; extraGroups = ["wheel" "plugdev" "dialout" "lp" "scanner" "wireshark"];
}; };
users.extraUsers.rj = { users.extraUsers.rj = {
isNormalUser = true; isNormalUser = true;
extraGroups = ["wheel" "plugdev" "dialout" "wireshark" "docker"]; extraGroups = ["wheel" "plugdev" "dialout" "wireshark"];
}; };
users.extraUsers.astro = { users.extraUsers.astro = {
isNormalUser = true; isNormalUser = true;
@ -155,7 +156,6 @@ ACTION=="add", SUBSYSTEM=="tty", \
nix.sandboxPaths = ["/opt"]; nix.sandboxPaths = ["/opt"];
virtualisation.libvirtd.enable = true; virtualisation.libvirtd.enable = true;
virtualisation.docker.enable = true;
services.gitea = { services.gitea = {
enable = true; enable = true;
@ -195,7 +195,6 @@ ACTION=="add", SUBSYSTEM=="tty", \
"lab.m-labs.hk" = null; "lab.m-labs.hk" = null;
"git.m-labs.hk" = null; "git.m-labs.hk" = null;
"chat.m-labs.hk" = null; "chat.m-labs.hk" = null;
"hooks.m-labs.hk" = null;
}; };
}; };
}; };
@ -249,6 +248,11 @@ ACTION=="add", SUBSYSTEM=="tty", \
uwsgi_pass unix:${config.services.uwsgi.runDir}/uwsgi.sock; uwsgi_pass unix:${config.services.uwsgi.runDir}/uwsgi.sock;
''; '';
}; };
"notifico.m-labs.hk" = {
forceSSL = true;
useACMEHost = "notifico.m-labs.hk";
locations."/".proxyPass = "http://127.0.0.1:5000";
};
}; };
}; };
services.uwsgi = { services.uwsgi = {
@ -267,6 +271,11 @@ ACTION=="add", SUBSYSTEM=="tty", \
config = "/etc/nixos/secret/homu.toml"; config = "/etc/nixos/secret/homu.toml";
}; };
services.notifico = {
enable = true;
config = "/etc/nixos/secret/notifico.py";
};
# This value determines the NixOS release with which your system is to be # This value determines the NixOS release with which your system is to be
# compatible, in order to avoid breaking some software such as database # compatible, in order to avoid breaking some software such as database
# servers. You should change this only after NixOS release notes say you # servers. You should change this only after NixOS release notes say you