chn/nixos
1
0
Fork 0
mirror of https://github.com/CHN-beta/nixos.git synced 2026-01-12 04:39:23 +08:00
Code Issues Packages Projects Releases Wiki Activity

enable send for vps6

Browse Source
This commit is contained in:
陈浩南
2023-08-13 20:53:42 +08:00
parent 0ea315017e
commit c3331ae425
3 changed files with 43 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
flake.nix
View File

@@ -335,6 +335,7 @@
"nix-store.chn.moe" = { upstream = "http://127.0.0.1:5000"; rewriteHttps = true; };
};
};
send.enable = true;
};
boot =
{

38
modules/services/default.nix
View File

@@ -107,6 +107,7 @@ inputs:
default = {};
};
};
send.enable = mkOption { type = types.bool; default = false; };
};
config =
let
@@ -938,5 +939,42 @@ inputs:
(attrNames services.nginx.httpProxy));
}
)
(
mkIf services.send.enable
{
virtualisation.oci-containers.containers.send =
{
image = "registry.gitlab.com/timvisee/send"
+ "@sha256:1ee495161f176946e6e4077e17be2b8f8634c2d502172cc530a8cd5affd7078f";
volumes = [ "/var/lib/send:/uploads" ];
ports = [ "127.0.0.1::1443" ];
extraOptions = [ "--add-host=host.docker.internal:host-gateway" ];
environmentFiles = [ inputs.config.sops.templates."send/env".path ];
};
sops =
{
templates."send/env".content = stripeTabs
''
BASE_URL = "https://send.chn.moe"
REDIS_HOST = "host.docker.internal"
REDIS_PORT = "7116"
REDIS_PASSWORD = "${inputs.config.sops.placeholder."send/redis-password"}"
'';
secrets."send/redis-password".owner = inputs.config.users.users.redis-send.name;
};
services.redis.servers.send =
{
enable = true;
unixSocket = null;
port = 7116;
requirePassFile = inputs.config.sops.secrets."send/redis-password".path;
};
nixos.services.nginx.httpProxy.send =
{
upstream = "127.0.0.1:1443";
rewriteHttps = true;
};
}
)
];
}

6
secrets/vps6.yaml
View File

@@ -45,6 +45,8 @@ xray-server:
private-key: ENC[AES256_GCM,data:ts/LRGFAsYqvGvkvlxUI42IW1a8cGsSkpZhMDd3QVceRKvhPb1SRDaXoSw==,iv:6xX9xFIFUNlLBZ6CPBOz9JbHpvC4+QG9ZaCZcWdl12c=,tag:DYIa+QTV8vyl1l7OKKykTw==,type:str]
nginx:
maxmind-license: ENC[AES256_GCM,data:sESU6uK9EYLido9/0sXO2Zw1SjuKmxPh4r3giJcaG7068gn1kByjsA==,iv:htnFgnLrH35zSvmlRAdoRDLFIpKroKO5dW9TNK9soUc=,tag:6pJuc54SrKP5n0kJJ7fGyA==,type:str]
send:
redis-password: ENC[AES256_GCM,data:6zVKw9AmKwSWvHUZhzy0F2KcJW96uFoZY/N1Zq8ilUJOLZeX,iv:viwLIgJz9v8oadr8784OgETbEsxzGsJvVoxmOwWEFxo=,tag:XEYFnoCGwlnrkqaUbgeH+Q==,type:str]
sops:
kms: []
gcp_kms: []
@@ -69,8 +71,8 @@ sops:
ZXFTU3ZCaW1pTVh0RUJzdDdGdHlPYTgK2mlgcX2kEc8+2UDdBnhUm6IIuh8V6agW
ooxH9OEPXUVI/4JcDo4v8ZUhAyU1ehLH0Ef7PJCChOZe2KZmWSNbhA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-08-13T05:45:18Z"
mac: ENC[AES256_GCM,data:gXuSpP/4DcqaT+LUCnJm4CgYO1rY5PYi05JGCUJnuUB2lwRwf2motRZQ3/ix3J5Gd1IJwMIXlnHf6HhylR5R9D6UCwuOkFEVMmDM+tWOZwzlvX9SUFFQXlpsHd4fOLFo2BIK6VZv+z1kmtQfLHF3QEA9KuPJ6pW/8zjtSNTaTxI=,iv:PSNaTXnV+idh0xqEfPob7GCKrugxeLhus3bFANukb74=,tag:2WKcb4jkpxntKzGLVC7o1Q==,type:str]
lastmodified: "2023-08-13T12:43:32Z"
mac: ENC[AES256_GCM,data:DlYEvBfUjXknkSe2WWlN4BJT/LmSWdpEqfMhsAlqkH0vuaR8YCrOkerroZ2rq/lMkbEAEegnvLGRrasdsEYNwNqObijx46G0CK1qd3Bk0BsSqTn7BKkkFtKnTBVgXlbKUh0W5Nj0d1xOmxfXxUcihrWv10VIv/tW5qCR6MG+zr0=,iv:prSTzD3eeSusnBQkU3lmQwqDctSJ7h9ByzzlYk2ACFU=,tag:Uv/VLGVxCXKbBHFaAT5BYQ==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.7.3