payas/nixos
Archived
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

outline: remove module

Browse source 
I like tiddywiki better. It is much nicer to setup, fast and no
bullshit.

For now, I'm keeping 'minio', just in case I have to experiment with S3
compatibility for something, but outline is definitely gone
This commit is contained in:
Payas Relekar 2023-09-17 15:19:09 +05:30
parent 6883d8dc38
commit 97e0f368c7
3 changed files with 0 additions and 103 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
flake.nix
View file

@ -78,7 +78,6 @@
./modules/monitoring/monitoring.nix
./modules/books.nix
./modules/paperless.nix
./modules/outline.nix
./modules/plausible.nix
./modules/vaultwarden.nix
./modules/hledger.nix

1
hosts/hermes/secrets/secrets.nix
View file

@ -15,7 +15,6 @@ in
"tunnel_bebop.json.age".publicKeys = [ ageKey ];
"vaultwarden.age".publicKeys = [ ageKey ];
"vaultwarden_smtp.age".publicKeys = [ ageKey ];
"outline_gmail.age".publicKeys = [ ageKey ];
"gandalf_mail.age".publicKeys = [ ageKey ];
"nginx.age".publicKeys = [ ageKey ];
"etebase.age".publicKeys = [ ageKey ];

101
modules/outline.nix
View file

@ -1,101 +0,0 @@
{ config, ... }:
{
# Open paperless port, but only for local network
networking.firewall.extraCommands = ''
iptables -A nixos-fw -p tcp --source 192.168.0.0/24 --dport 3000:3000 -j nixos-fw-accept
iptables -A nixos-fw -p tcp --source 192.168.0.0/24 --dport 9909:9909 -j nixos-fw-accept
iptables -A nixos-fw -p tcp --source 192.168.0.0/24 --dport 9910:9910 -j nixos-fw-accept
'';
systemd.tmpfiles.rules = [
"f /run/agenix/outline_gmail 0600 outline users -"
];
services = {
minio = {
enable = true;
region = "ap-south-1";
listenAddress = "0.0.0.0:9909";
consoleAddress = "0.0.0.0:9910";
browser = true;
rootCredentialsFile = "/run/agenix/minio";
};
outline = {
enable = true;
port = 3000;
publicUrl = "https://outline.bhankas.org";
enableUpdateCheck = false;
defaultLanguage = "en_US";
databaseUrl = "local";
redisUrl = "local";
concurrency = 4;
forceHttps = false;
rateLimiter = {
enable = true;
durationWindow = 60;
requests = 5000;
};
storage = {
region = config.services.minio.region;
accessKey = "lWdhw1nclwmJiR9j";
secretKeyFile = "/run/agenix/minio_secret_key";
uploadBucketUrl = "https://minio.bhankas.org";
uploadBucketName = "outline";
};
smtp = {
username = "gandalf@bhankas.org";
secure = true;
fromEmail = "gandalf@bhankas.org";
replyEmail = "gandalf@bhankas.org";
host = "smtp.purelymail.com";
port = 465;
passwordFile = "/run/agenix/gandalf_mail";
};
};
nginx = {
enable = true;
virtualHosts = {
"minio.bhankas.org" = {
addSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://${config.services.minio.consoleAddress}";
proxyWebsockets = false;
extraConfig =
"proxy_set_header Host $host;"
;
};
};
"outline.bhankas.org" = {
addSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.1:3000";
proxyWebsockets = true;
extraConfig =
"proxy_set_header Host $host;"
;
};
};
};
};
};
security.acme = {
acceptTerms = true;
certs = {
"minio.bhankas.org" = {
email = "admin@bhankas.org";
dnsResolver = "1.1.1.1:53";
};
"outline.bhankas.org" = {
email = "admin@bhankas.org";
dnsResolver = "1.1.1.1:53";
};
};
};
}