nydragon/nix-da
1
Fork 0
Code Issues Pull requests Activity Actions 1

feat: add ntfy

Browse source
This commit is contained in:
Nydragon 2024-12-31 01:00:45 +01:00
parent e047cc1f13
commit 8745cf3eff
Signed by: nydragon
SSH key fingerprint: SHA256:WcjW5NJPQ8Dx4uQDmoIlVPLWE27Od3fxoe0IUvuoPHE
3 changed files with 28 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
hosts/shan/adguard.nix
View file

@ -22,7 +22,10 @@ in
auth_attempts = 5; auth_attempts = 5;
block_auth_min = 10; block_auth_min = 10;
dns = { dns = {
bind_hosts = [ "0.0.0.0" ]; bind_hosts = [
"192.168.178.27"
"100.64.0.4"
];
port = 53; port = 53;
upstream_mode = "load_balance"; upstream_mode = "load_balance";
upstream_dns_file = config.age.secrets.adguard-dns-list.path; upstream_dns_file = config.age.secrets.adguard-dns-list.path;

35
hosts/shan/default.nix
View file

@ -159,20 +159,29 @@
}; };
}; };
}; };
};
networking.firewall.allowedTCPPorts = [ 5232 ];
# security.acme = { ntfy-sh = {
#acceptTerms = true; enable = true;
#certs = { settings =
#"ccnlc.eu" = { let
#email = "dns@ccnlc.eu"; root = "/var/lib/ntfy-sh";
#dnsProvider = "ovh"; in
#extraDomainNames = [ "*.ccnlc.eu" ]; {
#environmentFile = "/var/secrets/ovh-ccnlc"; base-url = "https://ntfy.ccnlc.eu";
#}; listen-http = "0.0.0.0:9393";
#}; auth-default-access = "deny-all";
#}; behind-proxy = true;
attachment-cache-dir = "${root}/attachments";
enable-signup = true;
enable-login = true;
};
};
};
networking.firewall.allowedTCPPorts = [
5232
9393
];
fileSystems = { fileSystems = {
"/mnt/shows" = { "/mnt/shows" = {

4
options/container/default.nix
View file

@ -1,7 +1,7 @@
{ config, lib, ... }: { config, lib, ... }:
let let
cfg = config.modules.container; cfg = config.modules.container;
inherit (lib) mkIf mkEnableOption; inherit (lib) mkIf mkEnableOption mkForce;
in in
{ {
imports = [ imports = [
@ -20,7 +20,7 @@ in
dockerCompat = true; dockerCompat = true;
defaultNetwork.settings = { defaultNetwork.settings = {
# Required for container networking to be able to use names. # Required for container networking to be able to use names.
dns_enabled = false; dns_enabled = mkForce false;
}; };
}; };
virtualisation.oci-containers.backend = "podman"; virtualisation.oci-containers.backend = "podman";