switched to unstable, amneziawg configured

This commit is contained in:
bogale 2026-09-17 23:30:14 +09:00
commit 26d383ea96
10 changed files with 110 additions and 75 deletions

View file

@ -9,7 +9,7 @@
hostName = "nixos-server";
networkmanager.ensureProfiles.profiles.home-wifi = {
wifi.ssid = "bogale_2.4";
wifi-security.psk = builtins.readFile "/root/secrets/home-wifi.psk";
wifi-security.psk = "$BOGALE_2_4_PSK";
};
firewall = {
allowedTCPPorts = [ 80 ];
@ -18,9 +18,6 @@
'';
};
};
#environment.systemPackages = with pkgs; [
#php
#];
services = {
postgresql.enable = true;
openssh = {
@ -56,26 +53,26 @@
'';
};
};
vaultwarden = {
enable = true;
configureNginx = true;
dbBackend = "postgresql";
configurePostgres = true;
package = pkgs.vaultwarden-postgresql;
domain = "https://wg.bogaledev.ru/vault";
environmentFile = "/root/secrets/vaultwarden.env";
config = {
EMAIL_TOKEN_SIZE = 8;
SMTP_SECURITY = "off";
SMTP_HOST = "localhost";
SIGNUPS_ALLOWED = false;
REQUIRE_DEVICE_EMAIL = true;
TRASH_AUTO_DELETE_DAYS = 90;
ROCKET_ADDRESS = "127.0.0.1";
PASSWORD_HINTS_ALLOWED = false;
EMERGENCY_ACCESS_ALLOWED = false;
SMTP_FROM = "vaultwarden@bogaledev.ru";
};
};
#vaultwarden = {
#enable = true;
#configureNginx = true;
#dbBackend = "postgresql";
#configurePostgres = true;
#package = pkgs.vaultwarden-postgresql;
#domain = "https://wg.bogaledev.ru/vault";
#environmentFile = "/root/secrets/vaultwarden.env";
#config = {
#EMAIL_TOKEN_SIZE = 8;
#SMTP_SECURITY = "off";
#SMTP_HOST = "localhost";
#SIGNUPS_ALLOWED = false;
#REQUIRE_DEVICE_EMAIL = true;
#TRASH_AUTO_DELETE_DAYS = 90;
#ROCKET_ADDRESS = "127.0.0.1";
#PASSWORD_HINTS_ALLOWED = false;
#EMERGENCY_ACCESS_ALLOWED = false;
#SMTP_FROM = "vaultwarden@bogaledev.ru";
#};
#};
};
}