bogale/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

grafana, prometheus

Browse source
This commit is contained in:
bogale 2026-09-28 16:31:13 +09:00
commit 5ee0a9c5cf
6 changed files with 69 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

17
server/configuration.nix
View file

@ -15,7 +15,9 @@
};
users = {
nginx.extraGroups = [ "php" "acme" ];
root.openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB+wc+3rahpNa+OMS9gaWgMQIxXIKHy4Beku5LBDt+Ow" ];
root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB+wc+3rahpNa+OMS9gaWgMQIxXIKHy4Beku5LBDt+Ow"
];
php = {
uid = 1568;
group = "php";
@ -31,8 +33,8 @@
networking = {
hostName = "nixos-server";
firewall = {
allowedTCPPorts = [ 25 443 465 993 ];
allowedUDPPorts = [ 443 ];
allowedTCPPorts = [ 25 443 465 993 ];
};
wg-quick.interfaces.awg0 = {
configFile = "/secrets/awg/1.conf";
@ -45,4 +47,15 @@
wifi-security.psk = "$BOGALE_2_4_PSK";
};
};
security.acme = {
acceptTerms = true;
defaults.email = "letsencrypt@bogaledev.ru";
certs."bogaledev.ru" = {
validMinDays = 3;
dnsProvider = "cloudflare";
extraDomainNames = [ "*.bogaledev.ru" ];
credentialFiles = { "CF_DNS_API_TOKEN_FILE" = "/secrets/cf-token"; };
reloadServices = [ "nginx.service" "dovecot.service" "postfix.service" ];
};
};
}