harivansh-afk/nix
1
1
Fork 0
mirror of https://github.com/harivansh-afk/nix.git synced 2026-04-21 00:04:52 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

split netty configuration.nix into per-service modules, remove sandbox-agent (#34)

Browse source 
Break the monolithic 495-line configuration.nix into focused modules:
- forgejo.nix: Forgejo service, git user, mirror sync timer
- betternas.nix: control-plane + node agent services
- vaultwarden.nix: Vaultwarden service
- nginx.nix: ACME + all Nginx virtualHosts

Remove sandbox-agent entirely (service, CORS proxy, package).
Keep netty.harivan.sh vhost reserved for future use.
This commit is contained in:
Hari 2026-04-01 23:09:27 -04:00 • committed by GitHub
parent c97726766a
commit c3fb0fc358
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
8 changed files with 297 additions and 4260 deletions
Download patch file Download diff file Expand all files Collapse all files

23
hosts/netty/vaultwarden.nix Normal file
View file

@ -0,0 +1,23 @@
{
...
}:
let
vaultDomain = "vault.harivan.sh";
in
{
systemd.tmpfiles.rules = [
"z /var/lib/vaultwarden/vaultwarden.env 0600 vaultwarden vaultwarden -"
];
services.vaultwarden = {
enable = true;
backupDir = "/var/backup/vaultwarden";
environmentFile = "/var/lib/vaultwarden/vaultwarden.env";
config = {
DOMAIN = "https://${vaultDomain}";
SIGNUPS_ALLOWED = false;
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8222;
};
};
}