modules: add time module

hosts/kariru/services/torrent.nix

@@ -2,7 +2,7 @@
   sops.secrets.gluetun = {};
   virtualisation.oci-containers.containers = {
     gluetun = {
-      image = "qmcgaw/gluetun:pr-1616";
+      image = "qmcgaw/gluetun:pr-1742";
       ports = [
         "8888:8888/tcp" # HTTP proxy
         "8388:8388/tcp" # Shadowsocks
@@ -15,7 +15,7 @@
       extraOptions = ["--cap-add=NET_ADMIN"];
     };
     qbittorrent = {
-      image = "linuxserver/qbittorrent:4.5.3";
+      image = "linuxserver/qbittorrent:4.5.5";
       dependsOn = ["gluetun"];
       environment = {
         PUID = "1001";

modules/README.md

@@ -15,5 +15,6 @@ name            | description
 `sops`          | configures sops-nix
 `swayidle`      | idle manager daemon
 `system`        | commonly shared system settings
+`time`          | force sets the time on all systems
 `users`         | defines all hosts users & groups
 `virtualisation`| basic docker configuration

modules/default.nix

@@ -10,5 +10,6 @@
     ./openssh.nix
     ./virtualisation.nix
     ./sops.nix
+    ./time.nix
   ];
 }

modules/time.nix

@@ -0,0 +1,23 @@
+_: {
+  services.chrony = {
+    enable = true;
+    servers = [
+      # 0.us.pool.ntp.org
+      "134.215.114.62"
+      "192.189.65.187"
+      "96.245.170.99"
+      "192.92.6.30"
+    ];
+  };
+
+  services.timesyncd = {
+    enable = true;
+    servers = [
+      # 0.us.pool.ntp.org
+      "134.215.114.62"
+      "192.189.65.187"
+      "96.245.170.99"
+      "192.92.6.30"
+    ];
+  };
+}

secrets/secrets.yaml

@@ -7,7 +7,6 @@ attic-secret: ENC[AES256_GCM,data:RH5ZyG/FqMgWAdNnwMCeP11d/+LxQ//IjIWoGp+Pck2otu
 gluetun: ENC[AES256_GCM,data:yL+LOPpwU+CAtbjc7YWbNUOTpDhq4mH3aJOl3hPYxgbFUba6NVJQ73mFt7BF+PXeqA/ilbZJW3GbCfAoXWLDP3qzFYqs9XeEV/FhHznkVHB88xdr+Fbv7cuCEa7PnnYbSiwr/R68EZLsGSr+u99+uu1TH6ABXG9nJna0bkwkTfx6ui/Yc2GndWS+Ew==,iv:rYdMasJS1LqMGvMYFyAdEkoTLtOHrZHGcfBOvbn63bg=,tag:YNcP/pvgKHPYNhAwVGdFHw==,type:str]
 authelia-jwt: ENC[AES256_GCM,data:cAn2uZeSGjG2FqTFgZkupcSutCZLvZXCNBsxuUQvGX4=,iv:1OTDQzQwaPTmnTEB4TfnxU6l8CdBAlHfqFThE8QZa6A=,tag:KJ6aYDczHFajhLJHemfIQw==,type:str]
 authelia-sek: ENC[AES256_GCM,data:yWhAvl1AuEcrUCFAv2vcz6A8BLEIMIz9sqbFRAriHpw=,iv:i887EZgqGtRfFs6mHHAJry0XfQzvrTaDliz8PRh7oLs=,tag:dmn2GSG8gZk9CVXMNmH1Dw==,type:str]
-cloudflareddns: ENC[AES256_GCM,data:xow7oaqa3QbMPwggx2zmGvLcKmov7isvLLZKuC6jW/SNjst8kicSQmNhrZw8M/eq8TuqxOT4BqMILQ+I7As2ZCOjSbEBxi1DwU/z47qI,iv:W8UH4kWlh9JyxcGkeuOjRZKqjOHDg9vpzXezHYs1kEg=,tag:YgGk7svEQr9sqLJtKWcHqA==,type:str]
 tsauth-sora: ENC[AES256_GCM,data:3jzPB0whb9xHudVl/MhNeCUgjDfzzQpxGJGqfMf2GqEtfEkiynVTLO/TFDt1PorBuUQOjVfxn8c=,iv:5vLHbhY2ZlnsVQbLlu6Hxo32azpfcj6ORAMn3oSdcHY=,tag:zN8qPOSaSMMdJn+zsTXPaA==,type:str]
 tsauth-sakura: ENC[AES256_GCM,data:iN77ArKDnltxrWGCz8bMqMHBAp45oGUk+n5ilAE0tY2rz01PGaCmIgPFSDfNaMphH6gX+AbEd5Y=,iv:k/lBIZW7aKT3u+dgcFnQORah2yHZXAmY+PBv53tM1ao=,tag:9/pebj3D9LURTedqkduoaw==,type:str]
 forgejo-runner-token: ENC[AES256_GCM,data:uHwIBG2Ktdhs2nhfbidHSEkv7bwLnWzHZEa01sfnv2oYvtlHdnTXJQ==,iv:IRS+qLbIFl5GXxChogs6yxsUD4MxnjCw2VF3dxCvSnI=,tag:elTaJSO1ex4qrF9Wu8gx2A==,type:str]
@@ -28,8 +27,8 @@ sops:
             YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt
             5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-10-10T19:01:17Z"
+    lastmodified: "2023-10-19T07:27:05Z"
-    mac: ENC[AES256_GCM,data:R+UqQiqRkLfFNcB8M1TkIpCLswnOubHeweTsFrAcwNccPSVHkLZkUnLZet4EiPJwZ3Ss4h66aFeR5bL5Z+MvR99Fr3x2rZusM1FGlPFK2gf0GdpboRq5BsJ93N1yTux5geDqyX502XK3TA1/HruN72Hor7b+9PxVOAkBEdb/MW0=,iv:RS2FMtqxvenTG9GYwlS/L8r2nuDUmkkdscXI+d8KRcY=,tag:pDJY0dSfCxMPS/oHU2yylg==,type:str]
+    mac: ENC[AES256_GCM,data:qQc53IWVlTEo3jBIQYKLN/Abivr88DflyB27oITEX3THxjvTSxWGBg9uIBmtYaMwiBxVDTNvwo4yTpvXWOcyaDpxAG01KI0pwoICp4+x+JSmoOZVp0QdEWr8zqUUVJQnNwWPZ9276iLhkTuBPpJ5KBoQPoKzCs2N2yUp1yD2J1o=,iv:Zc1/iIC9QBsWBq65wpWzMYq0R83rFAxwtdvGA6gjjjI=,tag:LBAzl8SiwBD/kzKo+gk3eQ==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.8.0