merge

condoserver_activate_flake.sh

@@ -1,3 +1,3 @@
 #!/usr/bin/env sh
 
-nixos-rebuild switch --fast --flake .#condoserver --target-host root@192.168.86.21 --build-host root@192.168.86.21
+nixos-rebuild switch --fast --flake .#condoserver --target-host root@condoserver.room409.wg.test --build-host root@condoserver.room409.wg.test

flake.lock

@@ -4,15 +4,14 @@
       "inputs": {
         "nixpkgs": [
           "nixpkgs"
-        ],
+        ]
-        "utils": "utils"
       },
       "locked": {
-        "lastModified": 1676367705,
+        "lastModified": 1690887397,
-        "narHash": "sha256-un5UbRat9TwruyImtwUGcKF823rCEp4fQxnsaLFL7CM=",
+        "narHash": "sha256-ckasuN7MgAiDgLkUo1IdEq8FEKymcUWKzmY6/R9KOOo=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "da72e6fc6b7dc0c3f94edbd310aae7cd95c678b5",
+        "rev": "4542db605602898fe0c431e19f01e1af2865dae8",
         "type": "github"
       },
       "original": {
@@ -23,11 +22,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1676569297,
+        "lastModified": 1690881714,
-        "narHash": "sha256-2n4C4H3/U+3YbDrQB6xIw7AaLdFISCCFwOkcETAigqU=",
+        "narHash": "sha256-h/nXluEqdiQHs1oSgkOOWF+j8gcJMWhwnZ9PFabN6q0=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "ac1f5b72a9e95873d1de0233fddcb56f99884b37",
+        "rev": "9e1960bc196baf6881340d53dccb203a951745a2",
         "type": "github"
       },
       "original": {
@@ -39,38 +38,7 @@
     "root": {
       "inputs": {
         "home-manager": "home-manager",
-        "nixpkgs": "nixpkgs",
+        "nixpkgs": "nixpkgs"
-        "vps_nixpkgs": "vps_nixpkgs"
-      }
-    },
-    "utils": {
-      "locked": {
-        "lastModified": 1667395993,
-        "narHash": "sha256-nuEHfE/LcWyuSWnS8t12N1wc105Qtau+/OdUAjtQ0rA=",
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "rev": "5aed5285a952e0b949eb3ba02c12fa4fcfef535f",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "type": "github"
-      }
-    },
-    "vps_nixpkgs": {
-      "locked": {
-        "lastModified": 1673410828,
-        "narHash": "sha256-xAggTjXt7iqOe4lNRtq+B31cjxchvJOr9zIJJ4JmfY8=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "9852294f15c380cd61fd441538982426f8ee8ccc",
-        "type": "github"
-      },
-      "original": {
-        "id": "nixpkgs",
-        "ref": "master",
-        "type": "indirect"
       }
     }
   },

flake.nix

@@ -3,14 +3,13 @@
 
     inputs = {
         nixpkgs.url = "nixpkgs/nixos-unstable";
-        vps_nixpkgs.url = "nixpkgs/master";
         home-manager = {
             url = "github:nix-community/home-manager";
             inputs.nixpkgs.follows =  "nixpkgs";
         };
     };
 
-    outputs = { self, nixpkgs, vps_nixpkgs, home-manager }@attrs:
+    outputs = { self, nixpkgs, home-manager }@attrs:
         let
           system = "x86_64-linux";
           homeManagerSharedModule = {
@@ -26,7 +25,32 @@
                   # changes in each release.
                   home.stateVersion = "22.11";
                   
-                  home.packages = with pkgs; [ ];
+                  fonts.fontconfig.enable = true;
+                  home.packages = with pkgs; [ fira-code jetbrains-mono iosevka monoid recursive ];
+
+                  systemd.user.services.mpris-proxy = {
+                    Unit.Description = "Mpris proxy";
+                    Unit.After = [ "network.target" "sound.target" ];
+                    Service.ExecStart = "${pkgs.bluez}/bin/mpris-proxy";
+                    Install.WantedBy = [ "default.target" ];
+                  };
+
+                  programs.foot = {
+                    enable = true;
+                    settings = {
+                      main = {
+                        #font = "Fira Code:size=8";
+                        #font = "JetBrainsMono:size=8";
+                        #font = "Iosevka:size=8";
+                        #font = "Monoid:size=6";
+                        font = "Recursive:size=8";
+                        #dpi-aware = "yes";
+                      };
+                      mouse = {
+                        hide-when-typing = "yes";
+                      };
+                    };
+                  };
                   programs.starship = {
                     enable = true;
                     enableBashIntegration = true;
@@ -212,8 +236,10 @@
                       shell = "/run/current-system/sw/bin/bash";
                   };
 
+                  #fonts.fonts = with pkgs; [ fira-code jetbrains-mono iosevka ];
+
                   # testing
-                  services.jellyfin.enable = false;
+                  #services.jellyfin.enable = false;
                   services.pipewire = {
                     enable = true;
                     alsa.enable = true;
@@ -226,6 +252,8 @@
                     extraPortals = [pkgs.xdg-desktop-portal-gtk ];
                     gtkUsePortal = true;
                   };
+
+                  hardware.bluetooth.enable = true;
                   services.blueman.enable = true;
 
                   services.printing.enable = true;
@@ -256,11 +284,11 @@
                   hardware.opengl.driSupport32Bit = true;
 
                   environment.systemPackages = with pkgs; [
-                    tmux vim wget curl git w3m iftop iotop killall file unzip zip ripgrep imv killall gomuks htop
+                    tmux vim wget curl git w3m iftop iotop killall file unzip zip ripgrep imv killall gomuks htop python3
                     firefox-wayland chromium gnome.nautilus
                     vlc steam calibre foliate transmission-gtk mupdf
                     gimp
-                    foot pavucontrol pywal
+                    pavucontrol pywal
                     sway wayland glib dracula-theme gnome.adwaita-icon-theme swaylock swayidle wl-clipboard
                     (pkgs.writeTextFile {
                       name = "dbus-sway-environment";
@@ -321,7 +349,7 @@
             modules = [
                 home-manager.nixosModules.home-manager
                 homeManagerSharedModule
-                ({ config, lib, pkgs, modulesPath, ... }@innerArgs: (lib.recursiveUpdate (commonConfigFunc innerArgs [ pkgs.light ]) {
+                ({ config, lib, pkgs, modulesPath, ... }@innerArgs: (lib.recursiveUpdate (commonConfigFunc innerArgs [ pkgs.light pkgs.gpodder ]) {
                   # HARDWARE
                   imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
 
@@ -348,22 +376,6 @@
                   networking.useDHCP = false;
                   networking.interfaces.eno1.useDHCP = true;
                   networking.interfaces.wlp1s0.useDHCP = true;
-                  networking.wireguard.interfaces = {
-                    wg0 = {
-                        ips = [ "10.100.0.7/24" ];
-                        privateKeyFile = "/home/nathan/wireguard-keys/private";
-                        peers = [
-                            {
-                                publicKey = "WXx7XXJzerPJBPMTvZ454iQhx5Q5bFvBgF6NsPPX9nk=";
-                                allowedIPs = [ "10.100.0.0/24" ];
-                                #allowedIPs = [ "0.0.0.0/0" ];
-                                ## Then sudo ip route add 104.238.179.164 via 10.0.0.1 dev enp30s0
-                                endpoint = "104.238.179.164:51820";
-                                persistentKeepalive = 25;
-                            }
-                        ];
-                    };
-                  };
                   system.stateVersion = "20.03";
                 }))
             ];
@@ -384,7 +396,7 @@
                   boot.supportedFilesystems = [ "ntfs" ];
                   fileSystems."/" = { device = "/dev/disk/by-uuid/163c1731-2f66-436b-a74f-20f84ec628dd"; fsType = "ext4"; };
                   fileSystems."/boot" = { device = "/dev/disk/by-uuid/9C44-5411"; fsType = "vfat"; };
-                  #fileSystems."/big_disk" = { device = "/dev/disk/by-uuid/B610D69310D65A47"; fsType = "ntfs3"; options = ["rw" "uid=1000"]; };
+                  fileSystems."/big_disk" = { device = "/dev/disk/by-uuid/B610D69310D65A47"; fsType = "ntfs3"; options = ["rw" "uid=1000"]; };
                   swapDevices = [ ];
                   networking.useDHCP = lib.mkDefault true;
                   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
@@ -423,13 +435,14 @@
 
                   # don't suspend on lid close
                   services.logind.lidSwitch = "ignore";
+                  services.glusterfs.enable = true;
                   networking.hostName = "condoserver"; # Define your hostname.
 
                   system.stateVersion = "22.11"; # Did you read the comment?
                 }))
             ];
         };
-        nixosConfigurations.vps = vps_nixpkgs.lib.nixosSystem {
+        nixosConfigurations.vps = nixpkgs.lib.nixosSystem {
             inherit system;
             specialArgs = attrs;
             modules = [
@@ -463,6 +476,15 @@
                             python-olm pycryptodome unpaddedbase64
                           ]);
                       });
+
+                      #lemmy-server = super.lemmy-server.overrideAttrs (old: {
+                      #  patches = (old.patches or []) ++ [(super.fetchpatch {
+                      #    name = "fix-db-migrations.patch";
+                      #    url = "https://gist.githubusercontent.com/matejc/9be474fa581c1a29592877ede461f1f2/raw/83886917153fcba127b43d9a94a49b3d90e635b3/fix-db-migrations.patch";
+                      #    hash = "sha256-BvoA4K9v84n60lG96j1+91e8/ERn9WlVTGk4Z6Fj4iA=";
+                      #  })];
+                      #});
+
                   }) ];
 
                   # Use the GRUB 2 boot loader.
@@ -568,6 +590,7 @@
                         public_baseurl = "https://synapse.room409.xyz/";
 
                         enable_registration = false;
+                        #enable_registration_without_verification = true;
                         #registration_shared_secret = null;
                         database.name = "psycopg2";
                         url_preview_enabled = true;
@@ -602,6 +625,17 @@
                       httpPort = 3001;
                   };
 
+                  #systemd.services.lemmy.environment.RUST_BACKTRACE = "full";
+                  #systemd.services.lemmy.environment.LEMMY_DATABASE_URL = pkgs.lib.mkForce "postgres:///lemmy?host=/run/postgresql&user=lemmy";
+                  #services.lemmy = {
+                  #    enable = true;
+                  #    database.createLocally = true;
+                  #    settings = {
+                  #        hostname = "lemmy.room409.xyz";
+                  #    };
+                  #    nginx.enable = true;
+                  #};
+
                   services.postgresql = {
                       enable = true;
                       # postgresql user and db name in the service.matrix-synapse.databse_args setting is default
@@ -623,6 +657,14 @@
                     settings.logtail.enabled = false;
                   };
 
+                  services.ttyd = {
+                    enable = true;
+                    port = 9134;
+                    username = "miloignis";
+                    passwordFile = /var/lib/ttyd/secrets;
+                    clientOptions.fontFamily="Recursive";
+                  };
+
                   security.acme.email = "miloignis@gmail.com";
                   security.acme.acceptTerms = true;
                   services.nginx = {
@@ -641,6 +683,12 @@
                           };
                       };
 
+                      ## the rest is defined by the lemmy service
+                      #virtualHosts."lemmy.room409.xyz" = {
+                      #    forceSSL = true;
+                      #    enableACME = true;
+                      #};
+
                       virtualHosts."forge.room409.xyz" = {
                           forceSSL = true;
                           enableACME = true;
@@ -690,6 +738,25 @@
                         enableACME = true;
                         root = "/var/www/faint.room409.xyz";
                       };
+                      virtualHosts."shell.room409.xyz" = {
+                        forceSSL = true;
+                        enableACME = true;
+                        locations."/" = {
+                          proxyPass = "http://localhost:9134";
+                          proxyWebsockets = true;
+                        };
+                      };
+                      virtualHosts."drop.room409.xyz" = {
+                        forceSSL = true;
+                        enableACME = true;
+                        locations."/" = {
+                          proxyPass = "http://localhost:9009";
+                          proxyWebsockets = true;
+                          extraConfig = ''
+                              client_max_body_size 500M;
+                          '';
+                        };
+                      };
                       #virtualHosts."www.kraken-lang.org" = {
                       #  forceSSL = true;
                       #  enableACME = true;
@@ -815,6 +882,7 @@
                       iftop ripgrep
                       config.services.headscale.package
                       #wireguard
+                      droopy
                   ];
                   users.extraUsers.nathan = {
                     name = "nathan";