M-Labs
/
nix-scripts
9
0
Fork 9
Code Issues 6 Pull Requests Releases Wiki Activity

Compare commits

base: M-Labs:b91e17ea7833541d220d4bcb331539ccd3857c0e
Branches Tags
M-Labs:master
..
compare: M-Labs:4b78fb81244864bcc10639b8b9c3102cd9f1fc15
Branches Tags
M-Labs:master

3 Commits
b91e17ea78 ... 4b78fb8124

Author SHA1 Message Date
Sebastien Bourdeauducq 4b78fb8124 enable docker 2019-05-20 09:20:28 +08:00
Sebastien Bourdeauducq 07af1db124 get SSL certificate for hooks.m-labs.hk 2019-05-20 09:18:21 +08:00
Sebastien Bourdeauducq 0796a9efa1 disable notifico for now 2019-05-20 09:18:10 +08:00
1 changed files with 4 additions and 13 deletions
Show Stats Expand all files Collapse all files

17
nixbld-etc-nixos/configuration.nix
View File

@ -9,7 +9,6 @@
[ # Include the results of the hardware scan. [ # Include the results of the hardware scan.
./hardware-configuration.nix ./hardware-configuration.nix
./homu/nixos-module.nix ./homu/nixos-module.nix
./notifico/nixos-module.nix
]; ];
# Use the systemd-boot EFI boot loader. # Use the systemd-boot EFI boot loader.
@ -70,11 +69,11 @@
users.extraGroups.plugdev = { }; users.extraGroups.plugdev = { };
users.extraUsers.sb = { users.extraUsers.sb = {
isNormalUser = true; isNormalUser = true;
extraGroups = ["wheel" "plugdev" "dialout" "lp" "scanner" "wireshark"]; extraGroups = ["wheel" "plugdev" "dialout" "lp" "scanner" "wireshark" "docker"];
}; };
users.extraUsers.rj = { users.extraUsers.rj = {
isNormalUser = true; isNormalUser = true;
extraGroups = ["wheel" "plugdev" "dialout" "wireshark"]; extraGroups = ["wheel" "plugdev" "dialout" "wireshark" "docker"];
}; };
users.extraUsers.astro = { users.extraUsers.astro = {
isNormalUser = true; isNormalUser = true;
@ -156,6 +155,7 @@ ACTION=="add", SUBSYSTEM=="tty", \
nix.sandboxPaths = ["/opt"]; nix.sandboxPaths = ["/opt"];
virtualisation.libvirtd.enable = true; virtualisation.libvirtd.enable = true;
virtualisation.docker.enable = true;
services.gitea = { services.gitea = {
enable = true; enable = true;
@ -195,6 +195,7 @@ ACTION=="add", SUBSYSTEM=="tty", \
"lab.m-labs.hk" = null; "lab.m-labs.hk" = null;
"git.m-labs.hk" = null; "git.m-labs.hk" = null;
"chat.m-labs.hk" = null; "chat.m-labs.hk" = null;
"hooks.m-labs.hk" = null;
}; };
}; };
}; };
@ -248,11 +249,6 @@ ACTION=="add", SUBSYSTEM=="tty", \
uwsgi_pass unix:${config.services.uwsgi.runDir}/uwsgi.sock; uwsgi_pass unix:${config.services.uwsgi.runDir}/uwsgi.sock;
''; '';
}; };
"notifico.m-labs.hk" = {
forceSSL = true;
useACMEHost = "notifico.m-labs.hk";
locations."/".proxyPass = "http://127.0.0.1:5000";
};
}; };
}; };
services.uwsgi = { services.uwsgi = {
@ -271,11 +267,6 @@ ACTION=="add", SUBSYSTEM=="tty", \
config = "/etc/nixos/secret/homu.toml"; config = "/etc/nixos/secret/homu.toml";
}; };
services.notifico = {
enable = true;
config = "/etc/nixos/secret/notifico.py";
};
# This value determines the NixOS release with which your system is to be # This value determines the NixOS release with which your system is to be
# compatible, in order to avoid breaking some software such as database # compatible, in order to avoid breaking some software such as database
# servers. You should change this only after NixOS release notes say you # servers. You should change this only after NixOS release notes say you