split netty configuration.nix into per-service modules, remove sandbox-agent (#34)

Break the monolithic 495-line configuration.nix into focused modules:
- forgejo.nix: Forgejo service, git user, mirror sync timer
- betternas.nix: control-plane + node agent services
- vaultwarden.nix: Vaultwarden service
- nginx.nix: ACME + all Nginx virtualHosts

Remove sandbox-agent entirely (service, CORS proxy, package).
Keep netty.harivan.sh vhost reserved for future use.
This commit is contained in:
Hari 2026-04-01 23:09:27 -04:00 committed by GitHub
parent c97726766a
commit c3fb0fc358
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
8 changed files with 297 additions and 4260 deletions

View file

@ -34,4 +34,4 @@ The VPS has a declarative service bundle:
- services only listen on 127.0.0.1 (runs behind nginx with ACME)
- Self hosts Forgejo mirroring to GitHub (git.harivan.sh)
- Self hosts VaultWarden
- Runs sandbox agent behind a CORS proxy
- betterNAS control-plane and node agent (api.betternas.com)