alex/nixos-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: alex/nixos-configs:e2f62568b5aebf4ea62249e04f0c74995f004ec4
Branches Tags
alex/nixos-configs:main
..
compare: alex/nixos-configs:42079c2268523b417dd3ad19e410657290ca7bf7
Branches Tags
alex/nixos-configs:main

5 Commits
e2f62568b5 .. 42079c2268

Author SHA1 Message Date
Alexander Heldt 42079c2268 Update puppy-tracker flake input 2026-07-09 20:35:48 +02:00
Alexander Heldt 4742e0f593 manatee: Add puppy-tracker behind virtual host puppy.ppp.pm 2026-07-09 20:34:43 +02:00
Alexander Heldt 3446756cc1 manatee: Add invite code secret for puppy-tracker 2026-07-09 20:34:12 +02:00
Alexander Heldt aa7ef695f4 manatee: Add ability to specify public url for homepage card 2026-07-09 20:33:22 +02:00
Alexander Heldt ff02728d82 manatee: Add puppy.ppp.pm sub-domain 
With cert and ip update
 2026-07-09 16:59:13 +00:00
7 changed files with 69 additions and 12 deletions
Expand all files Collapse all files
flake.lock
Generated
+4 -4
View File
@@ -882,11 +882,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1783157233, "lastModified": 1783621236,
"narHash": "sha256-1FU/4S5y4wxSKYGVglWWmRaE2CZb9DsQjAS8+IUmh0U=", "narHash": "sha256-8JU9/6kaWS15D+1nLze7dv+3PiC3UE5q/pZVyma3wfQ=",
"ref": "main", "ref": "main",
"rev": "da692d84da6f54089bbe7fb58035ed02f9f0299f", "rev": "706d8d8d9f39c857912a1871807e3a2100e565bd",
"revCount": 5, "revCount": 7,
"type": "git", "type": "git",
"url": "ssh://gitea@git.ppp.pm:1122/alex/puppy-tracker.git" "url": "ssh://gitea@git.ppp.pm:1122/alex/puppy-tracker.git"
}, },
hosts/manatee/modules/certs/default.nix
+13
View File
@@ -46,6 +46,19 @@
"--http-timeout=60" "--http-timeout=60"
]; ];
}; };
"puppy.ppp.pm" = {
dnsProvider = "hetzner";
environmentFile = config.age.secrets.hetzner-dns.path;
group = "nginx";
extraLegoFlags = [
"--dns.resolvers=1.1.1.1:53,8.8.8.8:53"
"--dns.propagation-wait=60s"
"--dns-timeout=60"
"--http-timeout=60"
];
};
}; };
}; };
hosts/manatee/modules/home-assistant/default.nix
+1 -1
View File
@@ -241,7 +241,7 @@ in
]; ];
script = '' script = ''
SUBDOMAINS="ha komga romm" SUBDOMAINS="ha komga romm puppy"
INTERFACE="enp3s0" INTERFACE="enp3s0"
CURRENT_IP=$(curl -s --fail --interface "$INTERFACE" ifconfig.me) CURRENT_IP=$(curl -s --fail --interface "$INTERFACE" ifconfig.me)
hosts/manatee/modules/homepage/default.nix
+17 -7
View File
@@ -9,13 +9,18 @@ let
nginxEnabled = config.mod.nginx.enable; nginxEnabled = config.mod.nginx.enable;
services = config.mod.homepage.services; services = config.mod.homepage.services;
serviceToCard = svc: '' serviceToCard =
<a class="card" href="http://manatee:${toString svc.port}"> svc:
<div class="name">${svc.name}</div> let
<div class="desc">${svc.description}</div> href = if svc.url != null then svc.url else "http://manatee:${toString svc.port}";
<div class="port">:${toString svc.port}</div> in
</a> ''
''; <a class="card" href="${href}">
<div class="name">${svc.name}</div>
<div class="desc">${svc.description}</div>
<div class="port">:${toString svc.port}</div>
</a>
'';
page = pkgs.writeTextDir "index.html" '' page = pkgs.writeTextDir "index.html" ''
<!DOCTYPE html> <!DOCTYPE html>
@@ -83,6 +88,11 @@ in
name = lib.mkOption { type = lib.types.str; }; name = lib.mkOption { type = lib.types.str; };
port = lib.mkOption { type = lib.types.port; }; port = lib.mkOption { type = lib.types.port; };
description = lib.mkOption { type = lib.types.str; }; description = lib.mkOption { type = lib.types.str; };
url = lib.mkOption {
type = lib.types.nullOr lib.types.str;
default = null;
description = "Link target for the card; defaults to http://manatee:<port>.";
};
}; };
} }
); );
hosts/manatee/modules/puppy-tracker/default.nix
+26
View File
@@ -6,6 +6,7 @@
}: }:
let let
enabled = config.mod.puppy-tracker.enable; enabled = config.mod.puppy-tracker.enable;
nginxEnabled = config.mod.nginx.enable;
port = 8089; port = 8089;
in in
{ {
@@ -25,6 +26,8 @@ in
name = "Puppy Tracker"; name = "Puppy Tracker";
port = port; port = port;
description = "Sleep, meals, pees, poos"; description = "Sleep, meals, pees, poos";
# Login needs HTTPS (Secure cookies), so link to the public vhost.
url = "https://puppy.ppp.pm";
} }
]; ];
@@ -32,6 +35,29 @@ in
enable = true; enable = true;
inherit port; inherit port;
openFirewall = true; openFirewall = true;
# Served publicly over HTTPS via the nginx vhost below.
secureCookies = true;
# Shared registration secret; the file holds `PUPPY_INVITE_CODE=...`.
inviteCodeFile = config.age.secrets."puppy-tracker-invite-code".path;
}; };
services.nginx = lib.mkIf nginxEnabled {
virtualHosts."puppy.ppp.pm" = {
forceSSL = true;
useACMEHost = "puppy.ppp.pm";
# Photo uploads are up to 15 MB; give nginx headroom over its 1 MB default.
extraConfig = ''
client_max_body_size 20m;
'';
locations."/" = {
proxyPass = "http://127.0.0.1:${toString port}";
};
};
};
age.secrets."puppy-tracker-invite-code".file =
../../../../secrets/manatee/puppy-tracker-invite-code.age;
}; };
} }
secrets/manatee/puppy-tracker-invite-code.age
+7
View File
@@ -0,0 +1,7 @@
age-encryption.org/v1
-> ssh-ed25519 wkRvNA 1U7rIOHezvIpeb7QBkwz+NOgagrPDltkFtWY2N/hdE4
9rLqhxhc4c7cGB9hDPy9r0y5QbDp0CcYFwIWczB0mlU
-> ssh-ed25519 +oNaHQ w9QggF6DOTSMUC5n+7OKpFOM8iDSQakgx/10pIhM9ws
GOk7OQpLh5OjyZTiJQxd7hhN93EcSMnMxueNh6AwCOk
--- mzQrbeaXCVPu0MqNC0iAMLCiZbopyfYanwhsgDjFbZE
�¡&ÈEÆݼ�žÊÆ öfh(tJn´Ð†ç$^åkì[ Cå
secrets/secrets.nix
+1
View File
@@ -44,6 +44,7 @@ in {
"manatee/romm-auth-secret-key.age".publicKeys = [ manatee alex ]; "manatee/romm-auth-secret-key.age".publicKeys = [ manatee alex ];
"manatee/romm-db-password.age".publicKeys = [ manatee alex ]; "manatee/romm-db-password.age".publicKeys = [ manatee alex ];
"manatee/romm-metadata-api-keys.age".publicKeys = [ manatee alex ]; "manatee/romm-metadata-api-keys.age".publicKeys = [ manatee alex ];
"manatee/puppy-tracker-invite-code.age".publicKeys = [ manatee alex ];
"backwards/root.backwards.age".publicKeys = [ backwards alex ]; "backwards/root.backwards.age".publicKeys = [ backwards alex ];
"backwards/root.backwards.pub.age".publicKeys = [ backwards alex ]; "backwards/root.backwards.pub.age".publicKeys = [ backwards alex ];