blake/nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

79 current 2025-10-08 00:28:08 25.05.20251001.5b5be50 6.12.49 *

Browse Source
This commit is contained in:
blake
2025-10-08 10:52:06 -05:00
parent f80ed87358
commit c43605f627
2 changed files with 16 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/homelab/services/arr/flaresolverr/default.nix
View File

@@ -44,7 +44,7 @@ in
services.flaresolverr = {
enable = true;
openFirewall = true;
port = cfg.port
port = cfg.port;
};
# override umask to make permissions work out

26
modules/homelab/services/default.nix.template
View File

@@ -53,7 +53,11 @@ in
};
# override umask to make permissions work out
systemd.services.<service_name>.serviceConfig = { UMask = lib.mkForce "0007"; };
systemd.services.<service_name>.serviceConfig = {
UMask = lib.mkForce "0007";
# User = "<service_name>";
# Group = "<service_name>";
};
# # open firewall
# networking.firewall.allowedTCPPorts = [ cfg.port ];
@@ -68,16 +72,16 @@ in
proxyPass = "http://127.0.0.1:${toString cfg.port}";
};
};
# external reverse proxy entry
services.nginx.virtualHosts."<service_name>.blakedheld.xyz" = {
enableACME = false;
forceSSL = true;
sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
locations."/" = {
proxyPass = "http://127.0.0.1:${toString cfg.port}";
};
};
# # external reverse proxy entry
# services.nginx.virtualHosts."<service_name>.blakedheld.xyz" = {
# enableACME = false;
# forceSSL = true;
# sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
# sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
# locations."/" = {
# proxyPass = "http://127.0.0.1:${toString cfg.port}";
# };
# };
sops.secrets = {
"<service_name>_" = {