home: add daphbot to ssh

home/default.nix

@@ -57,6 +57,10 @@
         HostName 100.87.54.48
         User notoh
         IdentityFile ~/.ssh/sora
+      Host daphbot
+        Hostname 100.109.118.139
+        User root
+        IdentityFile ~/.ssh/daphbot
       Host tsuru
         HostName 100.82.146.40
         User notoh

hosts/sakura/services/forgejo.nix

@@ -1,9 +1,4 @@
-{
-  pkgs,
-  lib,
-  config,
-  ...
-}: {
+{lib, ...}: {
   networking.firewall.allowedTCPPorts = [2222];
   services.forgejo = {
     enable = true;
@@ -11,6 +6,7 @@
     settings = {
       service.DISABLE_REGISTRATION = true;
       DEFAULT.APP_NAME = "forgejo";
+      log.LEVEL = "Debug";
       ui = {
         DEFAULT_THEME = "forgejo-dark";
       };

hosts/sora/services/traefik.nix

@@ -33,6 +33,11 @@
             redirectscheme.scheme = "https";
             redirectscheme.permanent = true;
           };
+          cors = {
+            headers = {
+              accessControlAllowOriginList = "https://daphbot.notohh.dev";
+            };
+          };
         };
         routers = {
           api = {
@@ -117,6 +122,7 @@
             service = "forgejo";
             tls.domains = [{main = "*.flake.sh";}];
             tls.certresolver = "production";
+            middlewares = "cors";
           };
           rustypaste-insecure = {
             rule = "Host(`i.flake.sh`)";

hosts/tsuki/default.nix

@@ -1,7 +1,6 @@
 {
   config,
   pkgs,
-  inputs,
   ...
 }: {
   imports = [
@@ -32,8 +31,6 @@
     hostName = "tsuki";
   };
 
-  programs.sniffnet.enable = true;
-
   services = {
     xserver = {
       enable = true;
@@ -110,6 +107,7 @@
   };
 
   environment.systemPackages = with pkgs; [
+    nil
     dconf
     polkit_gnome
     libvirt
@@ -117,6 +115,5 @@
     pinentry-gtk2
     jdk17
     comma
-    inputs.matugen.packages.x86_64-linux.default
   ];
 }

pkgs/chatterino7/default.nix

@@ -21,8 +21,8 @@ stdenv.mkDerivation rec {
   src = fetchFromGitHub {
     owner = "SevenTV";
     repo = pname;
-    rev = "v${version}";
-    sha256 = "sha256-WFmv15rZPnTFruoYpXHUBj1NduppNE3dt5S/ArWL1Wg=";
+    rev = "c7a11ebce0b4ef7acaa1a71389f242861726c3a7";
+    sha256 = "sha256-yDqkhlYuaLCWS//Z8ndN/LXSCL61N5vAJWe/SmEHt2Y=";
     fetchSubmodules = true;
   };