update to 23.11

2024-01-05 23:44:08 -08:00
parent b59ad9f485
commit 6fb6d4ca75
22 changed files with 84 additions and 50 deletions
@@ -21,7 +21,7 @@
    ../profiles/sync/website
    ../profiles/grasp
    # ../profiles/archivebox
-    ../profiles/woodpecker-agent
+    # ../profiles/woodpecker-agent
    ../profiles/jellyfin
    ../profiles/ulogger-server
    ../profiles/photoprism
@@ -51,6 +51,25 @@
    # seafile
  };

+  services.transmission = {
+    enable = true;
+    settings = {
+      rpc.bind-address = "0.0.0.0";
+      download-dir = "/mnt/two/new-music";
+    };
+  };
+  services.nginx.virtualHosts."transmission.mossnet.lan" = {
+    enableACME = false;
+    forceSSL = false;
+
+    locations."/" = {
+      extraConfig = ''
+        proxy_pass http://localhost:9091/;
+        proxy_set_header X-Forwarded-Host $host;
+      '';
+    };
+  };
+
  age.secrets.box-wg.file = "${self}/secrets/box-wg.age";
  age.secrets.box-wg.owner = "anish";
  age.secrets.borg-key.file = "${self}/secrets/borg-key.age";
@@ -12,7 +12,7 @@
    ../profiles/mimetypes
    ../profiles/syncthing
    ../profiles/mossnet-hosts
-    ../profiles/fly-wg
+    # ../profiles/fly-wg
    # ../profiles/kuberenetes
    # ../profiles/mount-mossnet
  ];
@@ -6,9 +6,9 @@
    ../profiles/server
    # ../profiles/metrics
    ../profiles/gitea
-    ../profiles/woodpecker-server
+    # ../profiles/woodpecker-server
    ../profiles/rss-bridge
-    ../profiles/mount-mossnet
+    # ../profiles/mount-mossnet
    ../profiles/freshrss
    ../profiles/microbin
  ];
@@ -5,7 +5,7 @@ in
  imports = [ ../../users/anish ];

  fonts = {
-    fonts = with pkgs; [ powerline-fonts dejavu_fonts ];
+    packages = with pkgs; [ powerline-fonts dejavu_fonts ];
    fontconfig.defaultFonts = {
      monospace = [ "DejaVu Sans Mono for Powerline" ];
      sansSerif = [ "DejaVu Sans" ];
@@ -69,6 +69,7 @@ in
    unstable.newsflash
    unstable.liferea
    unstable.gh
+    unstable.flyctl

    kooha
    light
@@ -122,7 +123,7 @@ in
    };
    xserver = {
      enable = true;
-      layout = "us,dvorak";
+      xkb.layout = "us,dvorak";
      desktopManager.wallpaper.mode = "fill";
      displayManager = {
        defaultSession = "none+bspwm";
@@ -212,7 +213,7 @@ in
    };
  };

-  fonts.fonts = with pkgs; [
+  fonts.packages = with pkgs; [
    fira-code
    fira-code-symbols
    hermit
@@ -33,10 +33,13 @@ let
    "paper.mossnet.lan"
    "cal.mossnet.lan"
    "archive.mossnet.lan"
+    "headphones.mossnet.lan"
+    "transmission.mossnet.lan"
    "tracks.mossnet.lan"
    "grasp.mossnet.lan"
    "photos.mossnet.lan"
  ];
+
 in
 {
  services.unbound = {
@@ -1,5 +1,6 @@
 { pkgs, config, lib, ... }:

 {
-  networking.wg-quick.interfaces.fly-wg.configFile = "/home/anish/usr/fly-test/fly-wg.conf";
+  networking.wireguard.interfaces.fly-wg = "/home/anish/usr/fly-io-test/fly-wg.conf";
+  # ssh.startAgent = true;
 }
@@ -25,9 +25,10 @@
        freshrss-users freshrss freshrss
      '';
    ensureDatabases = [ "freshrss" ];
-    ensureUsers = [
-      { name = "freshrss"; ensurePermissions."DATABASE freshrss" = "ALL PRIVILEGES"; }
-    ];
+    ensureUsers = [{ 
+      name = "freshrss"; 
+      ensureDBOwnership = true;
+    }];
    # TODO
    # initialScript # set password for freshrss user
  };
@@ -54,11 +54,13 @@
        gitea-users gitea gitea
      '';
    ensureDatabases = [ "gitea" ];
-    ensureUsers = [
-      { name = "gitea"; ensurePermissions."DATABASE gitea" = "ALL PRIVILEGES"; }
-    ];
+    ensureUsers = [{ 
+      name = "gitea"; 
+      ensureDBOwnership = true; 
+    }];
    # TODO
-    # initialScript # set password for gitea user
+    # initialScript 
+    # set password for gitea user
  };

  services.nginx = {
@@ -2,11 +2,20 @@
 {
  services.headphones = {
    enable = true;
-    host = "192.168.1.240";
+    host = "0.0.0.0";
    port = 8181;
    user = "headphones";
    group = "audio";
    dataDir = "/data/music";
  };
-  networking.firewall.allowedTCPPorts = [ 8181 ];
+  services.nginx.virtualHosts."headphones.mossnet.lan" = {
+    enableACME = false;
+    forceSSL = false;
+
+    locations."/" = {
+      extraConfig = ''
+        proxy_pass http://127.0.0.1:8181/;
+      '';
+    };
+  };
 }
@@ -36,6 +36,10 @@
    services.postgresql = {
      ensureUsers = [{
        name = "grafana";
+        # TODO this is deprecated 
+        # Need to translate this to 
+        # systemd.services.postgresql.postStart
+        # or initialScript 
        ensurePermissions = {
          "ALL TABLES IN SCHEMA public" = "SELECT";
          "DATABASE wallabag" = "CONNECT";
@@ -4,6 +4,8 @@
    192.168.1.240 mossnet.lan
    192.168.1.240 links.mossnet.lan
    192.168.1.240 read.mossnet.lan
+    192.168.1.240 headphones.mossnet.lan
+    192.168.1.240 transmission.mossnet.lan
    192.168.1.240 music.mossnet.lan
    192.168.1.240 stats.mossnet.lan
    192.168.1.240 file.mossnet.lan
@@ -31,14 +31,14 @@
  ];

  hardware.pulseaudio.enable = lib.mkForce false;
-  security.rtkit.enable = true;
+  security.rtkit.enable = false;

  services.pipewire = {
    enable = true;
    alsa.enable = true;
-    alsa.support32Bit = true;
+    alsa.support32Bit = false;
    pulse.enable = true;
-    jack.enable = true;
+   jack.enable = true;
    # Deprecated as of 23.05
    # config = {
    #   pipewire."context.properties"."default.clock.rate" = "48000";
@@ -58,6 +58,6 @@
  #  "${config.hardware.bluetooth.package}/libexec/bluetooth/bluetoothd --noplugin=sap"
  #];
  boot.kernelModules = [ "snd-seq" "snd-rawmidi" ]; # midi sequence kernel mods
-  hardware.pulseaudio.package = pkgs.pulseaudio.override { jackaudioSupport = true; };
+  # hardware.pulseaudio.package = pkgs.pulseaudio.override { jackaudioSupport = true; };

 }
@@ -6,9 +6,7 @@
    ensureDatabases = [ "photoprism" ];
    ensureUsers = [{
      name = "photoprism";
-      ensurePermissions = {
-        "DATABASE photoprism" = "ALL PRIVILEGES";
-      };
+      ensureDBOwnership = true;
    }];
  };

@@ -6,9 +6,7 @@
    ensureDatabases = [ "ulogger" ];
    ensureUsers = [{
      name = "ulogger";
-      ensurePermissions = {
-        "DATABASE ulogger" = "ALL PRIVILEGES";
-      };
+      nsureDBOwnership = true;
    }];
  };

@@ -14,7 +14,7 @@
    ensureUsers = [
      {
        name = "wallabag";
-        ensurePermissions."DATABASE wallabag" = "ALL PRIVILEGES";
+        ensureDBOwnership = true;
      }
    ];
  };
@@ -18,7 +18,7 @@
    peers = [
      {
        # box
-        publicKey = "Ra78mOc110K7URN5uB3m9d78iBKgeRHzT+3HkiFp9BU=";
+        publicKey = "OnvVM1UaX0nmdohzSDyl90VKwd4VUpJZ+4oBpkkytwU=";
        allowedIPs = [ "10.0.69.4/32" ];
      }
      {
@@ -27,9 +27,7 @@
    ensureDatabases = [ "woodpecker" ];
    ensureUsers = [{
      name = "woodpecker";
-      ensurePermissions = {
-        "DATABASE woodpecker" = "ALL PRIVILEGES";
-      };
+      ensureDBOwnership = true;
    }];
  };