split netty configuration.nix into per-service modules, remove sandbox-agent

Break the monolithic 495-line configuration.nix into focused modules:
- forgejo.nix: Forgejo service, git user, mirror sync timer
- betternas.nix: control-plane + node agent services
- vaultwarden.nix: Vaultwarden service
- nginx.nix: ACME + all Nginx virtualHosts

Remove sandbox-agent entirely (service, CORS proxy, package).
Keep netty.harivan.sh vhost reserved for future use.
This commit is contained in:
Harivansh Rathi 2026-04-01 23:07:53 -04:00
parent c97726766a
commit fd79908ad2
8 changed files with 297 additions and 4260 deletions

View file

@ -34,4 +34,4 @@ The VPS has a declarative service bundle:
- services only listen on 127.0.0.1 (runs behind nginx with ACME)
- Self hosts Forgejo mirroring to GitHub (git.harivan.sh)
- Self hosts VaultWarden
- Runs sandbox agent behind a CORS proxy
- betterNAS control-plane and node agent (api.betternas.com)