abb9050f0c
chore: remove default CSP and add CSP for immich
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-10-06 17:49:49 +05:30
8e6c452854
fix: use builtin.readFile for cloudflare IPs and add sha256
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-10-06 00:03:58 +05:30
164acc1042
fix: use correct module options for fail2ban
...
* ignoreIPs -> ignoreIP
* Add settings block to each jail
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-10-06 00:03:01 +05:30
6887ce0427
chore: replace vaapiIntel with intel-vaapi-driver
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-10-06 00:01:20 +05:30
a6805a4ddc
chore: upgrade default postgres to 16 and remove upgrade script
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-10-06 00:00:36 +05:30
4cb83f945d
feat: add fail2ban setup for services
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-10-05 21:00:53 +05:30
d4dc50237a
feat: create module for nginx and prepare for fail2ban setup
...
* create new module for nginx
* setup cloudflare real_ip_header forwarding for fail2ban setup
* add hsts, improve qualys score
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-10-05 20:52:11 +05:30
653ee4e3b6
fix: use correct module name for backups
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-30 12:24:35 +05:30
e6068d34d5
fix: use correct variable for restic secrets
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-30 12:11:48 +05:30
d532eda109
feat: add service for postgresql with upgrade and backup
...
* replace per-app postgresql configuration with a single, global postgres
setup
* add backup configuration to backup using restic
* add cluster upgrade script based on the NixOS Manual:
https://nixos.org/manual/nixos/stable/#module-services-postgres-upgrading
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-30 12:01:57 +05:30
1a54eab3fb
fix: pass lib to backup module and fixup backup configuration
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-30 11:16:19 +05:30
104d4b6c8d
chore: move lanzaboote to system module and remove nixpkgs-immich input
...
* lanzaboote is needed to evaluate nix configuration, even if it's not used
in the system.
* removed nixpkgs-immich since nixpkgs now has immich service
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-30 11:14:57 +05:30
40d4792bc8
feat: enable restic backup service for vaultwarden and paperless
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-30 01:17:54 +05:30
d32004c45a
feat: add module for immich service
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-29 23:32:15 +05:30
5b2cea38f9
feat: add module for ntfy service
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-29 23:24:14 +05:30
11b0bf7522
fix: spell paperless environment variable correctly
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-15 11:22:36 +05:30
a2991e9ca8
chore: pass websocket connections to paperless
...
This is required for the document upload processing to successfully run.
Without this enabled, the document upload gets stuck on:
Upload complete, waiting...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-04 02:15:28 +05:30
abdeb98f11
chore: change filename format for paperless
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-03 01:53:38 +05:30
7520c9a86d
fix: use correct ssh domain and port for gitea
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-02 19:18:38 +05:30
e6b20e5def
feat: refactor unifi-controller, add unifi-unpoller for monitoring
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-02 19:17:56 +05:30
3408ceb62c
feat: add nix module for arr suite
...
Can finally deploy:
* Jellyfin
* Jellyseerr
* Radarr, Prowlarr, Sonarr, Bazarr
* QBitTorrent + VueTorrent
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-02 19:14:35 +05:30
3a3a8afe30
feat: add nixos configuration based on snowfall-lib
...
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-09-02 18:31:19 +05:30
