qbit/xin
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

box: enable tcp and allow local postgres connection

Browse Source 
also add back nextcloud stuff, but keep it disabled for now
This commit is contained in:
Aaron Bieber 2023-07-06 08:29:02 -06:00
parent d9e8a1d242
commit ef7f23ebbe
No known key found for this signature in database
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
hosts/box/default.nix
View File

@ -45,6 +45,8 @@ in {
imports = [ ./hardware-configuration.nix ];
sops.secrets = {
nextcloud_db_pass = { sopsFile = config.xin-secrets.box.services; };
nextcloud_admin_pass = { sopsFile = config.xin-secrets.box.services; };
photoprism_admin_password = { sopsFile = config.xin-secrets.box.services; };
gitea_db_pass = {
owner = config.users.users.gitea.name;
@ -213,6 +215,26 @@ in {
};
services = {
nextcloud = {
enable = false;
hostName = "nc.humpback-trout.ts.net";
home = "/media/nextcloud";
https = true;
autoUpdateApps = { enable = true; };
config = {
overwriteProtocol = "https";
dbtype = "pgsql";
dbuser = "nextcloud";
dbhost = "/run/postgresql";
dbname = "nextcloud";
dbpassFile = "${config.sops.secrets.nextcloud_db_pass.path}";
adminpassFile = "${config.sops.secrets.nextcloud_admin_pass.path}";
adminuser = "admin";
};
};
invidious = {
enable = true;
settings = {
@ -802,6 +824,13 @@ in {
enable = true;
dataDir = "/db/postgres";
enableTCPIP = true;
authentication = pkgs.lib.mkOverride 14 ''
local all all trust
host all all 127.0.0.1/32 trust
host all all ::1/128 trust
'';
ensureDatabases = [ "nextcloud" "gitea" ];
ensureUsers = [
{