313 current 2025-10-11 18:01:55 25.05.20251006.20c4598 6.12.50 *

flake.nix

@@ -1,6 +1,6 @@
 # flake for blakes nixos config
 # define new devices in outputs
-# generation: 312 current  2025-10-11 17:54:46  25.05.20251006.20c4598  6.12.50                          *
+# generation: 313 current  2025-10-11 18:01:55  25.05.20251006.20c4598  6.12.50                          *
 {
   description = "blakes nix config";
   inputs = {

modules/homelab/services/gitea/default.nix

@@ -108,13 +108,6 @@ in
       };
     };
 
-    sops.secrets = {
-      "${service}_database_password" = {
-        owner = "${service}";
-        group = "${service}";
-      };
-    };
-
     # add to glance
     modules.services.glance.links.services = [{
       title = service;
@@ -123,6 +116,13 @@ in
       check-url = "http://${homelab.host_ip}:${toString cfg.port}";
       icon = "di:${service}"; }];
 
+    sops.secrets = {
+      "${service}_database_password" = {
+        owner = "${service}";
+        group = "${service}";
+      };
+    };
+
     # add to backups
     modules.system.backups.baks = {
       ${service} = { paths = [ cfg.data_dir ]; };

modules/homelab/services/smarthome/zigbee2mqtt/default.nix

@@ -104,13 +104,6 @@ in
       };
     };
 
-    sops.secrets = {
-      "mosquitto_passwd.yaml" = {
-        owner = "${service}";
-        group = "${service}";
-      };
-    };
-
     # add to glance
     modules.services.glance.links.services = [{
       title = service;
@@ -119,6 +112,13 @@ in
       check-url = "http://${homelab.host_ip}:${toString cfg.port}";
       icon = "di:${service}"; }];
 
+    sops.secrets = {
+      "mosquitto_passwd.yaml" = {
+        owner = "${service}";
+        group = "${service}";
+      };
+    };
+
     # add to backups
     modules.system.backups.baks = {
      ${service} = { paths = [ cfg.data_dir ]; };

modules/homelab/services/uptime-kuma/default.nix

@@ -60,6 +60,7 @@ in
       settings = 
       {
         PORT = toString cfg.port;
+        HOST = "0.0.0.0";
       };
     };
 
@@ -83,20 +84,13 @@ in
       };
     };
 #     # external reverse proxy entry
-#     services.nginx.virtualHosts."uptime.blakedheld.xyz" = {
+#     services.nginx.virtualHosts."up.blakedheld.xyz" = {
 #      forceSSL = true;
 #      sslCertificate = sec."ssl_blakedheld_crt".path;
 #      sslCertificateKey = sec."ssl_blakedheld_key".path;
 #      locations."/" = {
 #        proxyPass = "http://127.0.0.1:${toString cfg.port}";
 #      };
-#    };
-
-#    sops.secrets = {
-#      "${service}_" = {
-#        owner = "${service}";
-#        group = "${service}";
-#      };
 #    };
 
     # add to glance
@@ -107,6 +101,13 @@ in
       check-url = "http://${homelab.host_ip}:${toString cfg.port}";
       icon = "di:${service}"; }];
 
+#    sops.secrets = {
+#      "${service}_" = {
+#        owner = "${service}";
+#        group = "${service}";
+#      };
+#    };
+
      # add to backups
      modules.system.backups.paths = lib.mkIf cfg.backup [ cfg.data_dir ];
   };

modules/homelab/services/vaultwarden/default.nix

@@ -103,13 +103,6 @@ in
       };
     };
 
-    sops.secrets = {
-      "${service}_admin_token" = {
-        owner = "${service}";
-        group = "${service}";
-      };
-    };
-
     # add to glance
     modules.services.glance.links.services = [{
       title = service;
@@ -118,6 +111,13 @@ in
       check-url = "http://${homelab.host_ip}:${toString cfg.port}";
       icon = "di:${service}"; }];
 
+    sops.secrets = {
+      "${service}_admin_token" = {
+        owner = "${service}";
+        group = "${service}";
+      };
+    };
+
      # add to backups
     modules.system.backups.baks = {
       ${service} = { paths = [ cfg.data_dir ]; };