all repos — nixfiles @ 75f50ef880d290501b18a855174f9fe88a6a1c55

System and user configuration, managed by nix and home-manager

readeck: decommission

Alin
commit

75f50ef880d290501b18a855174f9fe88a6a1c55

parent

d8f819636703c573f31b259f67a19d0db4c096e1

4 files changed, 1 insertion(+), 67 deletions(-)

changed files
D secrets/readeck.age
@@ -1,9 +0,0 @@
-age-encryption.org/v1 --> ssh-ed25519 knHzXw Xc6tk+ExYd86QmQrvaSbidteHl6NxglHDEHllKiLE2k -E8noc1LjcjRWwlsL0mPBjakmOw5ixt6MkQTtjC5h/Og --> ssh-ed25519 J6Hb1Q J9OKT5F9Dxerw0ViqcxU/d5NUjEgHCd+i/iEJM2Jn3o -z+OFuyUsco9FwZl39t3DXE+WeN+QcEmL3KjBKG5iPuE --> piv-p256 VBDKjg A83hjfnyQBeiwSdrr/7GP0p8/RtKIog6VMTeTY0nVKl5 -I1cl4XCGbYgV0VtHJ3QsPq6fVnvi8OK1Fc5k5jduZ6U ---- 293RJPn1cS0bfaG7BUtP/rWnsr1iKlC9zZUyr2I/CfI -ÕNÏðpœQÂã›féÄ·ÊlYÁnœmUy÷c+§âmq=±ë£)p×Öò)ù&ºœT:*¸'A r›œ€f•;‡ßç›Á{TyxAAcN(òŸ
M secrets/secrets.nix → secrets/secrets.nix
@@ -36,9 +36,7 @@ ];
powerdns = [ hasel ]; - readeck = [ - hasel - ]; + codeberg-runner = [ hasel ];
M system/hosts/hasel.nix → system/hosts/hasel.nix
@@ -19,7 +19,6 @@ ../roles/goatcounter.nix
../roles/go-vanity.nix ../roles/nix-remote-builder.nix ../roles/paperless.nix - ../roles/readeck.nix ../roles/redis-website.nix ../roles/searchix.nix ../roles/searchix-stable-container.nix
D system/roles/readeck.nix
@@ -1,54 +0,0 @@
-{ - config, - ... -}: -let - data = import ../../data; -in -{ - age.secrets.readeck.file = ../../secrets/readeck.age; - - services.readeck = { - enable = true; - environmentFile = config.age.secrets.readeck.path; - settings = { - server = { - host = "unix:/run/web/readeck.sock?mode=0660"; - base_url = "https://read.${data.tailnet}"; - }; - email = { - host = "localhost"; - port = 587; - from = "readeck@${data.pubnet}"; - from_noreply = "noreply+readeck@${data.pubnet}"; - }; - auth.forwarded = { - enabled = true; - provisioning = false; - header_user = "X-Webauth-User"; - header_email = "X-Webauth-Email"; - }; - }; - }; - - services.caddy.virtualHosts = { - "read.${data.tailnet}" = { - extraConfig = '' - bind tailscale/read - tls { - get_certificate tailscale - } - tailscale_auth - reverse_proxy { - to unix//run/web/readeck.sock - header_up X-Webauth-User {http.auth.user.tailscale_login} - header_up X-Webauth-Email {http.auth.user.tailscale_user} - } - ''; - }; - }; - - systemd.services.readeck.serviceConfig = { - SupplementaryGroups = [ "webservice" ]; - }; -}