From 384b18b5756f27ba558969a2c66da178c08bce98 Mon Sep 17 00:00:00 2001
From: blake <me@blakedheld.xyz>
Date: Sat, 11 Oct 2025 18:08:36 -0500
Subject: [PATCH] 313 current  2025-10-11 18:01:55  25.05.20251006.20c4598 
 6.12.50                          *

---
 flake.nix                                       |  2 +-
 modules/homelab/services/gitea/default.nix      | 14 +++++++-------
 .../services/smarthome/zigbee2mqtt/default.nix  | 14 +++++++-------
 .../homelab/services/uptime-kuma/default.nix    | 17 +++++++++--------
 .../homelab/services/vaultwarden/default.nix    | 14 +++++++-------
 5 files changed, 31 insertions(+), 30 deletions(-)

diff --git a/flake.nix b/flake.nix
index 32b210c..2b1c05d 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,6 +1,6 @@
 # flake for blakes nixos config
 # define new devices in outputs
-# generation: 312 current  2025-10-11 17:54:46  25.05.20251006.20c4598  6.12.50                          *
+# generation: 313 current  2025-10-11 18:01:55  25.05.20251006.20c4598  6.12.50                          *
 {
   description = "blakes nix config";
   inputs = {
diff --git a/modules/homelab/services/gitea/default.nix b/modules/homelab/services/gitea/default.nix
index a011a50..cafeae8 100644
--- a/modules/homelab/services/gitea/default.nix
+++ b/modules/homelab/services/gitea/default.nix
@@ -108,13 +108,6 @@ in
       };
     };
 
-    sops.secrets = {
-      "${service}_database_password" = {
-        owner = "${service}";
-        group = "${service}";
-      };
-    };
-
     # add to glance
     modules.services.glance.links.services = [{
       title = service;
@@ -123,6 +116,13 @@ in
       check-url = "http://${homelab.host_ip}:${toString cfg.port}";
       icon = "di:${service}"; }];
 
+    sops.secrets = {
+      "${service}_database_password" = {
+        owner = "${service}";
+        group = "${service}";
+      };
+    };
+
     # add to backups
     modules.system.backups.baks = {
       ${service} = { paths = [ cfg.data_dir ]; };
diff --git a/modules/homelab/services/smarthome/zigbee2mqtt/default.nix b/modules/homelab/services/smarthome/zigbee2mqtt/default.nix
index 0e6c1d1..b7d9a62 100644
--- a/modules/homelab/services/smarthome/zigbee2mqtt/default.nix
+++ b/modules/homelab/services/smarthome/zigbee2mqtt/default.nix
@@ -104,13 +104,6 @@ in
       };
     };
 
-    sops.secrets = {
-      "mosquitto_passwd.yaml" = {
-        owner = "${service}";
-        group = "${service}";
-      };
-    };
-
     # add to glance
     modules.services.glance.links.services = [{
       title = service;
@@ -119,6 +112,13 @@ in
       check-url = "http://${homelab.host_ip}:${toString cfg.port}";
       icon = "di:${service}"; }];
 
+    sops.secrets = {
+      "mosquitto_passwd.yaml" = {
+        owner = "${service}";
+        group = "${service}";
+      };
+    };
+
     # add to backups
     modules.system.backups.baks = {
      ${service} = { paths = [ cfg.data_dir ]; };
diff --git a/modules/homelab/services/uptime-kuma/default.nix b/modules/homelab/services/uptime-kuma/default.nix
index 4e924e9..c96363d 100644
--- a/modules/homelab/services/uptime-kuma/default.nix
+++ b/modules/homelab/services/uptime-kuma/default.nix
@@ -60,6 +60,7 @@ in
       settings = 
       {
         PORT = toString cfg.port;
+        HOST = "0.0.0.0";
       };
     };
 
@@ -83,20 +84,13 @@ in
       };
     };
 #     # external reverse proxy entry
-#     services.nginx.virtualHosts."uptime.blakedheld.xyz" = {
+#     services.nginx.virtualHosts."up.blakedheld.xyz" = {
 #      forceSSL = true;
 #      sslCertificate = sec."ssl_blakedheld_crt".path;
 #      sslCertificateKey = sec."ssl_blakedheld_key".path;
 #      locations."/" = {
 #        proxyPass = "http://127.0.0.1:${toString cfg.port}";
 #      };
-#    };
-
-#    sops.secrets = {
-#      "${service}_" = {
-#        owner = "${service}";
-#        group = "${service}";
-#      };
 #    };
 
     # add to glance
@@ -107,6 +101,13 @@ in
       check-url = "http://${homelab.host_ip}:${toString cfg.port}";
       icon = "di:${service}"; }];
 
+#    sops.secrets = {
+#      "${service}_" = {
+#        owner = "${service}";
+#        group = "${service}";
+#      };
+#    };
+
      # add to backups
      modules.system.backups.paths = lib.mkIf cfg.backup [ cfg.data_dir ];
   };
diff --git a/modules/homelab/services/vaultwarden/default.nix b/modules/homelab/services/vaultwarden/default.nix
index f3586e3..e34c6de 100644
--- a/modules/homelab/services/vaultwarden/default.nix
+++ b/modules/homelab/services/vaultwarden/default.nix
@@ -103,13 +103,6 @@ in
       };
     };
 
-    sops.secrets = {
-      "${service}_admin_token" = {
-        owner = "${service}";
-        group = "${service}";
-      };
-    };
-
     # add to glance
     modules.services.glance.links.services = [{
       title = service;
@@ -118,6 +111,13 @@ in
       check-url = "http://${homelab.host_ip}:${toString cfg.port}";
       icon = "di:${service}"; }];
 
+    sops.secrets = {
+      "${service}_admin_token" = {
+        owner = "${service}";
+        group = "${service}";
+      };
+    };
+
      # add to backups
     modules.system.backups.baks = {
       ${service} = { paths = [ cfg.data_dir ]; };