98 lines
1.7 KiB
Nix
98 lines
1.7 KiB
Nix
{config, ...}: {
|
|
server = {
|
|
enable = true;
|
|
email = "adam@cnst.dev";
|
|
domain = "cnix.dev";
|
|
user = "share";
|
|
group = "share";
|
|
uid = 994;
|
|
gid = 993;
|
|
|
|
authentik = {
|
|
enable = true;
|
|
};
|
|
traefik = {
|
|
enable = true;
|
|
};
|
|
www = {
|
|
enable = true;
|
|
url = "cnst.dev";
|
|
};
|
|
gitea = {
|
|
enable = true;
|
|
};
|
|
unbound = {
|
|
enable = true;
|
|
};
|
|
acme = {
|
|
enable = false;
|
|
};
|
|
homepage-dashboard = {
|
|
enable = true;
|
|
};
|
|
n8n = {
|
|
enable = true;
|
|
};
|
|
bazarr = {
|
|
enable = true;
|
|
};
|
|
prowlarr = {
|
|
enable = true;
|
|
};
|
|
lidarr = {
|
|
enable = true;
|
|
};
|
|
sonarr = {
|
|
enable = true;
|
|
};
|
|
radarr = {
|
|
enable = true;
|
|
};
|
|
jellyseerr = {
|
|
enable = true;
|
|
};
|
|
jellyfin = {
|
|
enable = true;
|
|
};
|
|
uptime-kuma = {
|
|
enable = true;
|
|
};
|
|
vaultwarden = {
|
|
enable = true;
|
|
url = "vault.cnst.dev";
|
|
cloudflared = {
|
|
tunnelId = "fdd98086-6a4c-44f2-bba0-eb86b833cce5";
|
|
credentialsFile = config.age.secrets.vaultwardenCloudflared.path;
|
|
};
|
|
};
|
|
nextcloud = {
|
|
enable = true;
|
|
adminpassFile = config.age.secrets.nextcloudAdminPass.path;
|
|
};
|
|
fail2ban = {
|
|
enable = true;
|
|
apiKeyFile = config.age.secrets.cloudflareFirewallApiKey.path;
|
|
zoneId = "0027acdfb8bbe010f55b676ad8698dfb";
|
|
};
|
|
keepalived = {
|
|
enable = true;
|
|
interface = "enp6s0";
|
|
};
|
|
podman = {
|
|
enable = true;
|
|
gluetun.enable = true;
|
|
qbittorrent = {
|
|
enable = true;
|
|
port = 8080;
|
|
};
|
|
slskd = {
|
|
enable = true;
|
|
};
|
|
pihole = {
|
|
enable = true;
|
|
port = 8053;
|
|
};
|
|
};
|
|
};
|
|
}
|