simon/nixos-config
simon/nixos-config
1
1
Fork 0
Code Issues 8 Pull requests Actions Projects Activity

nazuna: Enable torrent

Browse source
This commit is contained in:
Simon Bruder 2023-10-04 17:02:16 +02:00
parent 3a12a3f53a
commit 16c0472bb0
Signed by: simon
GPG key ID: 8D3C82F9F309F8EC
5 changed files with 28 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
machines/nazuna/configuration.nix
View file

@ -1,4 +1,4 @@
{ pkgs, ... }: { lib, pkgs, ... }:
{ {
imports = [ imports = [
@ -7,10 +7,32 @@
]; ];
sbruder = { sbruder = {
nginx.hardening.enable = true;
wireguard.home.enable = true; wireguard.home.enable = true;
}; };
networking.hostName = "nazuna"; networking.hostName = "nazuna";
system.stateVersion = "23.05"; system.stateVersion = "23.05";
services.nginx = {
enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
};
networking.firewall.allowedTCPPorts = [ 80 443 ];
systemd.services.nginx.serviceConfig.SupplementaryGroups = lib.singleton "keys";
sbruder.qbittorrent = {
enable = true;
fqdn = "sturzbach.sbruder.de";
};
services.nginx.virtualHosts."sturzbach.sbruder.de" = {
enableACME = true;
forceSSL = true;
};
} }

5
machines/nazuna/secrets.yaml
View file

@ -1,12 +1,13 @@
wg-home-private-key: ENC[AES256_GCM,data:fqdPyTa/0Ixr0sO8m06Q1xoAFYBA3q2P4Ho7k6AZBakcKvaXyqFiaISsIuk=,iv:tFANTuH8NHs7cHGduzn66njpCfK1tyydRlBCwv/ffyQ=,tag:Q+dBhMjjHG0cZlfindxBhQ==,type:str] wg-home-private-key: ENC[AES256_GCM,data:fqdPyTa/0Ixr0sO8m06Q1xoAFYBA3q2P4Ho7k6AZBakcKvaXyqFiaISsIuk=,iv:tFANTuH8NHs7cHGduzn66njpCfK1tyydRlBCwv/ffyQ=,tag:Q+dBhMjjHG0cZlfindxBhQ==,type:str]
wg-qbittorrent-private-key: ENC[AES256_GCM,data:ui0klTtpg1DYl2A1R1PbGngnv0WFY7/qjcTdUpmpTiZVmxJxCdMId/ussvo=,iv:2vpZN1rjipjdBQKRAKv9Qf5EP1PSUBGKWg9j78WoXLs=,tag:WxNLrGNCa9ozYJjN9xRK6w==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
azure_kv: [] azure_kv: []
hc_vault: [] hc_vault: []
age: [] age: []
lastmodified: "2023-10-04T14:03:02Z" lastmodified: "2023-10-04T14:34:22Z"
mac: ENC[AES256_GCM,data:hq5V3kGoTgox9/tJRvLk6hhfG4b9V31ACMOhWVI4kEdWUKJ+o5NvRfh7ITgkNpwR1LYMGQBl/b2bhQEGt6QLYG7zd0QL/htOY8rT7u9QAp6EnZxpIYMzEkDjLzT6xLdSiUVl1XgmObkoHagkZARkBk2IWrzsrdxFklS5vjaWzEA=,iv:pM2qoSHOojQ8PaYKoWOagsZol+bNEUDJeuPh+T6v5HM=,tag:rOMaP5hSEzCNm98Vei1jdQ==,type:str] mac: ENC[AES256_GCM,data:LjETyB9nqN6y/mevYOGXSkWNCNtu/fTXazy3VmZANNQCTuP5J5j6QmS3o9u+VCmrLpntpeNa+BT5VSbHgdlN70zdvgSZFhKSw/cn66L+dfO9bqUwDVDN2S8RSE6RGbFz4oYxS950JHEOKPyD8svtlT8xLq9seeMcvwp+KcSZqMY=,iv:70PeKVRqKj/6/o46TAzICQZDi83m4qPTTR1K3S6JiOo=,tag:9rQR9e9ZGYMgbklV9lWdLA==,type:str]
pgp: pgp:
- created_at: "2023-10-04T14:02:47Z" - created_at: "2023-10-04T14:02:47Z"
enc: |- enc: |-

BIN
machines/nazuna/secrets/wireguard-qbittorrent.nix Normal file
View file

Binary file not shown.

1
machines/renge/services/prometheus.nix
View file

@ -76,6 +76,7 @@ in
job_name = "qbittorrent"; job_name = "qbittorrent";
static_configs = mkStaticTargets [ static_configs = mkStaticTargets [
"fuuko.vpn.sbruder.de:9561" "fuuko.vpn.sbruder.de:9561"
"nazuna.vpn.sbruder.de:9561"
]; ];
relabel_configs = lib.singleton { relabel_configs = lib.singleton {
target_label = "instance"; target_label = "instance";

1
modules/media-proxy.nix
View file

@ -5,6 +5,7 @@ let
"media" = config.sops.secrets.media-proxy-auth.path; "media" = config.sops.secrets.media-proxy-auth.path;
"media-sb" = config.sops.secrets.media-proxy-auth.path; "media-sb" = config.sops.secrets.media-proxy-auth.path;
"torrent" = config.sops.secrets.torrent-proxy-auth.path; "torrent" = config.sops.secrets.torrent-proxy-auth.path;
"sturzbach" = config.sops.secrets.torrent-proxy-auth.path;
}; };
in in
{ {