blake/nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

79 current 2025-10-08 00:28:08 25.05.20251001.5b5be50 6.12.49 *

Browse Source
This commit is contained in:
blake
2025-10-08 10:52:06 -05:00
parent f80ed87358
commit c43605f627
2 changed files with 16 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/homelab/services/arr/flaresolverr/default.nix
View File

@@ -44,7 +44,7 @@ in
services.flaresolverr = { services.flaresolverr = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
port = cfg.port port = cfg.port;
}; };
# override umask to make permissions work out # override umask to make permissions work out

26
modules/homelab/services/default.nix.template
View File

@@ -53,7 +53,11 @@ in
}; };
# override umask to make permissions work out # override umask to make permissions work out
systemd.services.<service_name>.serviceConfig = { UMask = lib.mkForce "0007"; }; systemd.services.<service_name>.serviceConfig = {
UMask = lib.mkForce "0007";
# User = "<service_name>";
# Group = "<service_name>";
};
# # open firewall # # open firewall
# networking.firewall.allowedTCPPorts = [ cfg.port ]; # networking.firewall.allowedTCPPorts = [ cfg.port ];
@@ -68,16 +72,16 @@ in
proxyPass = "http://127.0.0.1:${toString cfg.port}"; proxyPass = "http://127.0.0.1:${toString cfg.port}";
}; };
}; };
# external reverse proxy entry # # external reverse proxy entry
services.nginx.virtualHosts."<service_name>.blakedheld.xyz" = { # services.nginx.virtualHosts."<service_name>.blakedheld.xyz" = {
enableACME = false; # enableACME = false;
forceSSL = true; # forceSSL = true;
sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path; # sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path; # sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
locations."/" = { # locations."/" = {
proxyPass = "http://127.0.0.1:${toString cfg.port}"; # proxyPass = "http://127.0.0.1:${toString cfg.port}";
}; # };
}; # };
sops.secrets = { sops.secrets = {
"<service_name>_" = { "<service_name>_" = {