nix: disable keep-derivations

hosts/sakura/services/default.nix

@@ -2,7 +2,6 @@
   imports = [
     ./traefik.nix
     ./authelia.nix
-    ./hugo.nix
     ./forgejo.nix
     ./rustypaste.nix
     ./woodpecker.nix

hosts/sakura/services/hugo.nix

@@ -1,13 +0,0 @@
-{pkgs, ...}: {
-  environment.systemPackages = with pkgs; [hugo];
-  virtualisation.oci-containers.containers.hugo = {
-    image = "klakegg/hugo:0.111.3-ext-ubuntu";
-    cmd = ["server"];
-    volumes = [
-      "/home/notoh/docker/hugo:/src"
-    ];
-    ports = [
-      "1313:1313"
-    ];
-  };
-}

hosts/sakura/services/traefik.nix

@@ -30,21 +30,6 @@
             entrypoints = ["web"];
             service = "dashdot";
           };
-          authelia = {
-            rule = "Host(`passport.notohh.dev`)";
-            entrypoints = ["websecure"];
-            service = "authelia";
-            tls.domains = [{main = "*.notohh.dev";}];
-            tls.certresolver = "production";
-          };
-          hugo = {
-            rule = "Host(`notohh.dev`)";
-            entrypoints = ["websecure"];
-            service = "hugo";
-            tls.domains = [{main = "*.notohh.dev";}];
-            tls.certresolver = "production";
-            middlewares = "authelia";
-          };
           foundryvtt = {
             rule = "Host(`foundry.flake.sh`)";
             entrypoints = ["websecure"];
@@ -96,9 +81,7 @@
           };
         };
         services = {
-          authelia.loadBalancer.servers = [{url = "http://localhost:9091";}];
           dashdot.loadBalancer.servers = [{url = "http://localhost:4000";}];
-          hugo.loadBalancer.servers = [{url = "http://localhost:1313";}];
           foundryvtt.loadBalancer.servers = [{url = "http://localhost:30000";}];
           forgejo.loadBalancer.servers = [{url = "http://localhost:3200";}];
           rustypaste.loadBalancer.servers = [{url = "http://localhost:8000";}];
@@ -123,7 +106,6 @@
         };
         web = {
           address = ":80";
-          forwardedHeaders.insecure = true;
         };
       };
       metrics = {

hosts/sora/services/traefik.nix

@@ -46,11 +46,19 @@
             tls.domains = [{main = "*.flake.sh";}];
             tls.certresolver = "production";
           };
+          authelia = {
+            rule = "Host(`passport.notohh.dev`)";
+            entrypoints = ["websecure"];
+            service = "authelia";
+            tls.domains = [{main = "*.notohh.dev";}];
+            tls.certresolver = "production";
+          };
         };
         services = {
           uptime-kuma.loadBalancer.servers = [{url = "http://100.87.54.48:4000";}];
           gotify.loadBalancer.servers = [{url = "http://100.87.54.48:3000";}];
           conduit.loadBalancer.servers = [{url = "http://100.121.201.47:6167";}];
+          authelia.loadBalancer.servers = [{url = "http://100.121.201.47:9091";}];
         };
       };
     };

modules/nix.nix

@@ -20,7 +20,6 @@ _: {
       warn-dirty = false;
       auto-optimise-store = true;
       builders-use-substitutes = true;
-      keep-derivations = true;
       keep-outputs = true;
       allowed-users = ["@wheel"];
       trusted-users = ["root" "@wheel"];