Grimmauld/grimm-nixos-laptop
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

forgejo migration

Browse source
This commit is contained in:
Grimmauld 2024-12-01 12:37:18 +01:00
parent 19f05aec9f
commit dd90defb6a
4 changed files with 14 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
modules/default.nix
View file

@ -13,7 +13,7 @@ in
./nextcloud.nix ./nextcloud.nix
./prometheus.nix ./prometheus.nix
# ./mjolnir.nix # ./mjolnir.nix
# ./fail2ban.nix ./fail2ban.nix
./email.nix ./email.nix
# ./discord-matrix-bridge.nix # ./discord-matrix-bridge.nix
./mastodon.nix ./mastodon.nix

2
modules/fail2ban.nix
View file

@ -15,7 +15,7 @@
bantime-increment = { bantime-increment = {
enable = true; # Enable increment of bantime after each violation enable = true; # Enable increment of bantime after each violation
multipliers = "1 2 4 8 16 32 64 128 256"; multipliers = "1 2 4 8 16 32 64 128 256";
maxtime = "168h"; # Do not ban for more than 1 week maxtime = "48h"; # Do not ban for more than 1 week
overalljails = true; # Calculate the bantime based on all the violations overalljails = true; # Calculate the bantime based on all the violations
}; };
}; };

12
modules/gitea.nix
View file

@ -4,8 +4,18 @@ let
inherit (config.serverConfig) ports vhosts; inherit (config.serverConfig) ports vhosts;
in in
{ {
services.gitea = { services.forgejo = {
enable = true; enable = true;
package = pkgs.forgejo;
database = {
user = "gitea";
path = "${config.services.forgejo.stateDir}/data/gitea.db";
name = "gitea";
};
dump.enable = true;
settings = { settings = {
service.DISABLE_REGISTRATION = true; service.DISABLE_REGISTRATION = true;
server = { server = {

1
specific/grimmauld-nixos-server/configuration.nix
View file

@ -9,6 +9,7 @@
networking.hostName = "grimmauld-nixos-server"; networking.hostName = "grimmauld-nixos-server";
networking.domain = "grimmauld.de"; networking.domain = "grimmauld.de";
services.openssh.enable = true; services.openssh.enable = true;
services.opensnitch.enable = lib.mkForce false;
system.stateVersion = "23.11"; system.stateVersion = "23.11";
networking.networkmanager.enable = lib.mkForce false; networking.networkmanager.enable = lib.mkForce false;
boot.kernelPackages = pkgs.linuxPackages_latest; boot.kernelPackages = pkgs.linuxPackages_latest;