mirror of
https://github.com/thegeneralist01/config.git
synced 2026-03-07 10:59:55 +01:00
services: add jellyfin, archivebox, custom dns
- `internal.thegeneralist01.com` and `archive.thegeneralist01.com` are not public. I have Split DNS enabled on them (in Tailscale), with the IP of the DNS server set to a private Tailscale IP of my home server; - CoreDNS (also on my home server) is used to resolve the two private domains' IPs to the home server itself; - nginx only listens to its machine's (home server's) Tailscale IP; - Therefore, all of it is hermetic!
This commit is contained in:
parent
8724801def
commit
572647d7c4
9 changed files with 194 additions and 11 deletions
|
|
@ -5,14 +5,14 @@
|
|||
{ config, pkgs, inputs, ... }:
|
||||
|
||||
{
|
||||
imports = [ ./hardware-configuration.nix ./site.nix ./cache ];
|
||||
imports = [ ./hardware-configuration.nix ./site.nix ./cache ./garage.nix ./archive ];
|
||||
|
||||
age.secrets.password.file = ./password.age;
|
||||
users.users = {
|
||||
thegeneralist = {
|
||||
isNormalUser = true;
|
||||
description = "thegeneralist";
|
||||
extraGroups = [ "wheel" "audio" "video" "input" "scanner" ];
|
||||
extraGroups = [ "wheel" "audio" "video" "input" "scanner" "docker" ];
|
||||
shell = pkgs.zsh;
|
||||
home = "/home/thegeneralist";
|
||||
hashedPasswordFile = config.age.secrets.password.path;
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue