root/the_prg_server_configuration
1
0
Fork 0
mirror of https://codeberg.org/polyteknisk-radiogruppe/the_prg_server_configuration.git synced 2026-10-21 11:25:46 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Compare commits

base: root:54a3be635ba87e37dc3ea9cc7574b79b9b152a0c
Branches Tags
root:main
..
compare: root:ee11c9171baed292a0dbbe0f69ebb262739acb10
Branches Tags
root:main

5 commits
54a3be635b ... ee11c9171b

Author SHA1 Message Date
Christine Elisabeth Koppel
ee11c9171b
Another typos of copy pasta fixed - now the URL should work. 2026-02-09 20:52:18 +01:00
Christine Elisabeth Koppel
c3c1554f83
Hopefully fixed odd as heck sops formatting. 2026-02-09 20:44:41 +01:00
Christine Elisabeth Koppel
37a23c3ad4
Fixed a huge issue with database not being actually sent to the dedicated server outside. No Kevin Fang in my watch. 2026-02-09 18:27:25 +01:00
Christine Elisabeth Koppel
6066626adf
Fixed a typo in the ssh_config 2026-02-09 18:17:51 +01:00
Christine Elisabeth Koppel
11b0dd4f1e
Remove dangling old secrets implementation. 2026-02-09 18:05:47 +01:00
3 changed files with 6 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nix-system-configs/modules/system/forgejo.nix
View file

@ -32,9 +32,6 @@ in {
}; };
imports = [ imports = [
# ./secrets/secrets.nix # Add this locally after running add-secrets.zsh
# Optionally import local secrets if present (won't fail if missing)
(lib.optional (builtins.pathExists ./secrets/secrets.nix) ./secrets/secrets.nix)
./modules/desktop-manager/sway_greetd_homemanager.nix ./modules/desktop-manager/sway_greetd_homemanager.nix
./modules/local/hostname_username.nix ./modules/local/hostname_username.nix
./modules/local/networking_local.nix ./modules/local/networking_local.nix
@ -70,6 +67,7 @@ in {
services.forgejo = { services.forgejo = {
enable = true; enable = true;
database = { database = {
createDatabase = false; # Database already created, DO NOT REMOVE THIS OR IT WILL DEFAULT INTO INTERNAL ONE
type = "postgres"; type = "postgres";
host = "10.1.1.251"; # IP of your database server host = "10.1.1.251"; # IP of your database server
name = "forgejo"; name = "forgejo";

3
nix-system-configs/modules/toolsets/remote_building.nix
View file

@ -39,7 +39,8 @@
HostName 10.1.1.3 HostName 10.1.1.3
IdentitiesOnly yes IdentitiesOnly yes
IdentityFile /root/.ssh/nixremote IdentityFile /root/.ssh/nixremote
User nixremoteStrictHostKeyChecking accept-new User nixremote
StrictHostKeyChecking accept-new
''; '';
# Manual step required: After rebuilding the client, copy /root/.ssh/nixremote.pub # Manual step required: After rebuilding the client, copy /root/.ssh/nixremote.pub

6
nix-system-configs/secrets/songsheet/secrets.yaml
View file

@ -1,6 +1,6 @@
songsheet: songsheet:
database: database:
DATABASE_URL: ENC[AES256_GCM,data:eKJ1u+2n59lpvue1Orysn9QEvfICSLncR1txXW3Smp9LhrADMOaEROCP/Cd+qH2p3635XSFhoPpN7E2L6l5GZSk1eNyPYdi41zycJUBzvy5rVMnBjYoBd8e+QFxrgDjZ2U7NunCwejqm5i0/5AwQ/0joJsGVwUiNcoYO,iv:ch4BF6C0qYvkCruysqBTwjZ+9mVx2AORJ2TzGM4BTqw=,tag:HqEmcIEq/Q60CSlwef6vLA==,type:str] DATABASE_URL: ENC[AES256_GCM,data:BTt1zpru/wBW0Vb4/My2NiX98cD2Gd8CsdivbtKf/3CJdjNaLzA0VS8ecAGvU9YvYlQri42pzDNxfeMuVF+nWRTtjdvPMFyZV9P7VeZ+05Rz3M1mKvWr37yTzTzi1bpjT+d6FttGIKEAym5VdM53CkSZPLV0S9e8/8Awa0TZ7MTX3Adt8amh,iv:jL7PyOC80zCPAZNdPLip2ngcqAIORM9QxzqKgu0roTM=,tag:JsFr+cJl6z2TTSpVAAyf2Q==,type:str]
sops: sops:
age: age:
- recipient: age1746rvsvsc3snxfl7cndm222wd5kck4aqj3x7nednlegq0gdjhfcqx0qv7m - recipient: age1746rvsvsc3snxfl7cndm222wd5kck4aqj3x7nednlegq0gdjhfcqx0qv7m
@ -21,7 +21,7 @@ sops:
V1F4TVEwaGgvUHcySnVQcXBHNzFuTU0KVNh7si39NVWZH9O52L9+gh1evvjotqK9 V1F4TVEwaGgvUHcySnVQcXBHNzFuTU0KVNh7si39NVWZH9O52L9+gh1evvjotqK9
Zjmb97QR1C2LzEqOrfPuj6Lr86SS4RYSzSq2Oknn9o9SIs/5thR0YQ== Zjmb97QR1C2LzEqOrfPuj6Lr86SS4RYSzSq2Oknn9o9SIs/5thR0YQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-02-07T17:44:51Z" lastmodified: "2026-02-09T19:51:51Z"
mac: ENC[AES256_GCM,data:lCQNNBpkCkzdTX+08eY4sMNFQbXSiNvBqBPro2U+OSaPvxjJRlG79K++mAnkCtFiIElSTACxOe8dTRz9frckVJQc5fL3o4PlDjeX3mzHj8V2F4DwEnQtJleLe63smtMb9ZJD3I0ivlfdcqV6GAIBtg65lQIEjgZ8tLvHSrsSpzs=,iv:PntgUV77KXsc6RLyLUBG0761GSQd/NjMA8XLyx4OBow=,tag:mI3B4aIsSTOQCOgKC6GCCg==,type:str] mac: ENC[AES256_GCM,data:2bro0enEMVx/znh8BPZdXrHAebq5Rej+xN+nSK9lthSNXztw0SXVsblhE7Zr+lcmNpJh7yOoa/buAZrcClM5HljcDL5pwLcHmKPhV/00TH2Pv5QiJww15MlxplwqW6LFmtEzInIF+fMENMU1v6v/1PrNaYYT68boMHEBlxFOXlo=,iv:0aa0G3KX3Gjzxz+rncbCJoENxW5nrlbg/opYGrC8sOc=,tag:4u81P/b5Fs4KQGHMGNZQ5A==,type:str]
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.11.0 version: 3.11.0