notohh/snowflake
notohh/snowflake
1
0
Fork 0
Code Issues Pull requests Projects 1 Releases Packages Wiki Activity

Compare commits

base: notohh:c10fefd8a7ba177879d1e15b3ec4170106ad8f4c
Branches Tags
notohh:master
...
compare: notohh:eddcb86e76b156ac3a935c55b2f2c411cc4fe01f
Branches Tags
notohh:master

2 commits
c10fefd8a7 ... eddcb86e76

Author SHA1 Message Date
notohh
eddcb86e76
sops: update secrets
All checks were successful
ci/woodpecker/push/checks Pipeline was successful
Details
2024-01-25 23:41:39 -05:00
notohh
212b9f7abc
hosts: move miniflux to sakura 2024-01-25 23:41:26 -05:00
8 changed files with 17 additions and 15 deletions
Show stats Expand all files Collapse all files

1
hosts/haru/services/blocky.nix
View file

@ -118,7 +118,6 @@
"prowlarr.internal.flake.sh" = "192.168.1.54";
"stash.internal.flake.sh" = "192.168.1.98";
"nextcloud.internal.flake.sh" = "192.168.1.199";
"news.internal.flake.sh" = "192.168.1.98";
# misc

1
hosts/sakura/services/default.nix
View file

@ -10,5 +10,6 @@
./conduit.nix
./tailscale.nix
./justlog.nix
./miniflux.nix
];
}

7
hosts/yuki/services/miniflux.nix → hosts/sakura/services/miniflux.nix
View file

@ -3,8 +3,6 @@
lib,
...
}: {
networking.firewall.allowedTCPPorts = [9000];
sops.secrets.miniflux = {};
services.miniflux = {
@ -13,7 +11,10 @@
config = {
LISTEN_ADDR = "0.0.0.0";
PORT = 9000;
DATABASE_URL = lib.mkForce "host=192.168.1.211 port=5432 user=miniflux password=miniflux dbname=miniflux sslmode=disable";
BASE_URL = "https://rss.flake.sh";
HTTPS = "true";
WEBAUTHN = "true";
DATABASE_URL = lib.mkForce "host=100.94.214.100 port=5432 user=miniflux password=miniflux dbname=miniflux sslmode=disable";
};
};
}

1
hosts/sora/networking.nix
View file

@ -30,6 +30,5 @@
};
services.udev.extraRules = ''
ATTR{address}=="96:00:02:c2:dc:83", NAME="eth0"
'';
}

8
hosts/sora/services/traefik.nix
View file

@ -160,6 +160,13 @@
tls.domains = [{main = "*.flake.sh";}];
tls.certresolver = "production";
};
miniflux = {
rule = "Host(`rss.flake.sh`)";
entrypoints = ["websecure"];
service = "miniflux";
tls.domains = [{main = "*.flake.sh";}];
tls.certresolver = "production";
};
};
services = {
forgejo.loadBalancer = {
@ -181,6 +188,7 @@
attic.loadBalancer.servers = [{url = "http://100.104.42.96:8200";}];
minio.loadBalancer.servers = [{url = "http://100.69.79.81:9005";}];
woodpecker.loadBalancer.servers = [{url = "http://100.82.146.40:8200";}];
miniflux.loadBalancer.servers = [{url = "http://100.121.201.47:9000";}];
};
};
};

1
hosts/yuki/services/default.nix
View file

@ -8,6 +8,5 @@
./wallos.nix
./homepage.nix
./searxng.nix
./miniflux.nix
];
}

6
hosts/yuki/services/traefik.nix
View file

@ -45,11 +45,6 @@ _: {
entrypoints = ["web"];
service = "hass";
};
miniflux = {
rule = "Host(`news.internal.flake.sh`)";
entrypoints = ["web"];
service = "miniflux";
};
};
services = {
stash.loadBalancer.servers = [{url = "http://localhost:9999";}];
@ -59,7 +54,6 @@ _: {
wallos.loadBalancer.servers = [{url = "http://localhost:8282";}];
searxng.loadBalancer.servers = [{url = "http://localhost:8100";}];
hass.loadBalancer.servers = [{url = "http://localhost:8123";}];
miniflux.loadBalancer.servers = [{url = "http://localhost:9000";}];
};
};
};

7
secrets/secrets.yaml
View file

@ -1,7 +1,7 @@
foundry-username: ENC[AES256_GCM,data:YYZ5Q6UlWPqbH8iYhqoR6pYFmQ3NAjY=,iv:pRjblo74gqbYYJTy/edn1bOsEKjHyvmXPwp6D/t6vxE=,tag:G5Xt+dVT51pU6kYdDra0Rw==,type:str]
foundry-password: ENC[AES256_GCM,data:c6cO1vV/thC7U1ha/1FiVVzk0KtvUnTRgJ9ysyO35uYhVK2ggyLUMAqBaXUduf4CXQ==,iv:jdnuyZyoaLN4waGI9MlU0coWg1adDIShrQykfuBq3UM=,tag:HNkaY/8k7JKQVCjjPlkO/w==,type:str]
cloudflare-api-key: ENC[AES256_GCM,data:ZEYzFht24xogGov/Dkk9MQm0CZ/GPHvVgC7manQ2hOp1ljUOPrlHlShnNZnXctkv0VSwkQUARddCFQbAno79bUM=,iv:V54QifTBvy+5Q5JErfv2IRW0wpBn7q9KozAogy94gwU=,tag:1tz/0lNHLUTiYOH4V1jkDA==,type:str]
gluetun: ENC[AES256_GCM,data:yL+LOPpwU+CAtbjc7YWbNUOTpDhq4mH3aJOl3hPYxgbFUba6NVJQ73mFt7BF+PXeqA/ilbZJW3GbCfAoXWLDP3qzFYqs9XeEV/FhHznkVHB88xdr+Fbv7cuCEa7PnnYbSiwr/R68EZLsGSr+u99+uu1TH6ABXG9nJna0bkwkTfx6ui/Yc2GndWS+Ew==,iv:rYdMasJS1LqMGvMYFyAdEkoTLtOHrZHGcfBOvbn63bg=,tag:YNcP/pvgKHPYNhAwVGdFHw==,type:str]
gluetun: ENC[AES256_GCM,data:0IYaty4Pdu5mRqJ8rWTywH3N++yV/Xbdd/WsnVwCPegrybnS7ikhe4wRxSuKSC5YiH2ouZghTLvJUQ9VNg+oPlTC2hhAsmCMd5gPFBHNuFFpSeTQ+DHkPFQJvZ3sOgRTKwh5yME/un+ARsbxQyyzKBH0G4ZG0+8I7tayptStkB4i+daSUPolTWDnGw==,iv:uPn6U6qO8+w92dqyTHOrzD1O4m15UfRAWT2nlAQFZVs=,tag:15g/1CSOKJ8Vfuu6pvsoeg==,type:str]
authelia-jwt: ENC[AES256_GCM,data:cAn2uZeSGjG2FqTFgZkupcSutCZLvZXCNBsxuUQvGX4=,iv:1OTDQzQwaPTmnTEB4TfnxU6l8CdBAlHfqFThE8QZa6A=,tag:KJ6aYDczHFajhLJHemfIQw==,type:str]
authelia-sek: ENC[AES256_GCM,data:yWhAvl1AuEcrUCFAv2vcz6A8BLEIMIz9sqbFRAriHpw=,iv:i887EZgqGtRfFs6mHHAJry0XfQzvrTaDliz8PRh7oLs=,tag:dmn2GSG8gZk9CVXMNmH1Dw==,type:str]
searxng-secret: ENC[AES256_GCM,data:SSvspQVRp79zJq0hzaqzuJIWFtVUoaqHGH9PXUViiXb9UKJM34t82o2J5K69RcOSBL7HadqmxcT4Eh8e8ZUJnquD7rrPdWb2Ih4zS7MmG94=,iv:wrQNNU7CjzfePNe1tWEXmN30vC0jTp+PtgfI3/XH22g=,tag:QAt/QL846hLLIMLQZUM3mQ==,type:str]
@ -10,6 +10,7 @@ minio: ENC[AES256_GCM,data:ePCaN1wRnZheBsjEcAPizfGtZskS9rPxfP1kvvQvR+i3TGfwvAx2V
attic: ENC[AES256_GCM,data:/zVpQw2yYqWWLhZnFCB17YZqcZs2Fn0L37aW1vK2Gj9npsHcOqV3d3Q7SkXSd+DIh68ECEWVoEovWgflm12fwUwXcU2yWofdfgIkO1DS9+9YRtPFPDIKwSE8YQS2V0r0IjV7KFppCrUSLZ2ehMGL/qzvQNdzVla0UsUKgqS0NjY29gcxdO4N5eJlBS/7KM297ulqu3InFdBI0rnO6t2iv37xBv5SEajPOWnaLpTYsm/aIwupJmCjwHb3WFv1NkyC+QAgCgUzNiufVwuVRrLT0fF+p1qDGjYG7Q+dwd+2K8k+MqeJNLw=,iv:k1Dg7/o2zulAX0K7IpRuwkWu+dxWRQ9H1p88MBmOapo=,tag:aDIx4hmWGiFgaEhz2Gz9lw==,type:str]
woodpecker-server: ENC[AES256_GCM,data:rI6Su65xSXGwy+wI9koVi1oL4RCSr5VEf8txJohzaPQRlyg03wZZzLCe1SSzEFsivYlL5B2XKAuVdYrkW5n5/XUENwxgPwrv7Vm3ufRfItj6+44VjV1mK8STmGnzkqglY7j71uX/+aVeqQwDM8uwWHCiT89kNTSd5ebrWzjIQ01DZ/ojPRZOZBLRE0rafA==,iv:1CuaRP0d9t8WkvMbUhDTi0hn+MqVL428Bu3r/fobK40=,tag:8KlR5EWU+cdDV5oLB8hHpA==,type:str]
woodpecker-agent-secret: ENC[AES256_GCM,data:DQoIOciEqDcaUYTTYFeIocmUUFB+ASstMA0ver4QiM/1n8G3udFL0OR6QRO1wx3bAlPCD4rrfiw1vYgAFj8xFg==,iv:X4goTnTQof1+OHj8nq6VAyCe+M7p2hLa4nDvm/hXw7U=,tag:3KbuBYTqU2hD3GB3r1siZw==,type:str]
miniflux: ENC[AES256_GCM,data:H5YA60nFQkUVBhLrNjQY7E5hhBPjjQEqQ6PJB5ZNj1KNKtUSWt+rzFt+Hce5JrNmmj7aZjmj9upuzPjRFdva/T9ZyRHm,iv:Ju6bElSOsj62L+5ANKEmE866sCy9IOP5V9P020tl9bU=,tag:ntDj4d+2fGOE443tPZj80Q==,type:str]
sops:
kms: []
gcp_kms: []
@ -25,8 +26,8 @@ sops:
YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt
5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-01-23T20:24:07Z"
mac: ENC[AES256_GCM,data:8Lj/939tJY4vOOuTN6OVN3VqTdKWCYmveibtbYIgdVSm8omNIoEWwZzmfZtKQ+GBIhV9TiI6ZbiBAq+6HaRB1FvnsuPK3o/UCXoOb8s+MKQsKRqHB0gWO75/Zuh3WX2+3SMSe3cq30jMiWj2ChSvqOsimzqdyiM3JJwn5dgZRbo=,iv:T7QJgPcrT80LpvrMllpHgC6/hRxb2h377GTcyjhknbY=,tag:tumGwP/iAvkMnnHc+o5+Pw==,type:str]
lastmodified: "2024-01-26T02:19:14Z"
mac: ENC[AES256_GCM,data:XRxttmSvlgl25HbaVywymRtayA35vQr8HqUlzHA8V8CpbCGdI1Xm5fHJSsaCfCCOdPtHqiLMDm6H8VWvBL2hFw/T6faqTqwagyninqt1D0yV3FuCuO4zFM/7tjnrYS/S314LTHA24TbU/sZFB1U4W6ADWaLuLDTt+w19910kfD8=,iv:8jPOXLTPAK2Iz+sLrz3uS5MhQvO53fJv5LIVdAzN35E=,tag:2QMN/8N9s1hc/j+VJdamZg==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1