summaryrefslogtreecommitdiff
path: root/hosts/ahmed/configuration.nix
diff options
context:
space:
mode:
authorLinnnus <[email protected]>2024-02-20 18:16:42 +0100
committerLinnnus <[email protected]>2024-02-20 18:16:42 +0100
commitb63d45d4bb3d9a49ac196acb3bf19aab35cb6b97 (patch)
treec25952ac8a3f9e6cee508c184d9d2af4dddce9e7 /hosts/ahmed/configuration.nix
parent1f675d8a4f90ea5e043a281f5b2a748033ada082 (diff)
tmp: Remove options in host-specific services (ahmed)reorg
Diffstat (limited to 'hosts/ahmed/configuration.nix')
-rw-r--r--hosts/ahmed/configuration.nix31
1 files changed, 2 insertions, 29 deletions
diff --git a/hosts/ahmed/configuration.nix b/hosts/ahmed/configuration.nix
index 43a170c..27c35eb 100644
--- a/hosts/ahmed/configuration.nix
+++ b/hosts/ahmed/configuration.nix
@@ -3,7 +3,6 @@
{
config,
pkgs,
- metadata,
...
}: {
imports = [
@@ -57,31 +56,11 @@
};
services.cloudflare-dyndns.domains = ["minecraft.linus.onl"];
- # Set up dukse server. Det er satme hårdt at være overduksepåmindelsesansvarlig.
- services.duksebot.enable = true;
-
# Virtual hosts.
+ # Each module for a HTTP service will register a virtual host.
services.nginx.enable = true;
- modules."linus.onl" = {
- enable = true;
- useACME = true;
- };
- modules."notifications.linus.onl" = {
- enable = true;
- useACME = true;
- };
- modules."git.linus.onl" = {
- enable = true;
- useACME = true;
- };
- modules."hellohtml.linus.onl" = {
- enable = true;
- useACME = true;
- };
-
- services.forsvarsarper.enable = true;
- # Configure ACME for various HTTPS services.
+ # Configure ACME. This is used by various HTTP services through the NGINX virtual hosts.
security.acme = {
acceptTerms = true;
defaults.email = "linusvejlo+${config.networking.hostName}[email protected]";
@@ -104,12 +83,6 @@
# Listen for HTTP connections.
networking.firewall.allowedTCPPorts = [80 443];
- # We are running behind CF proxy.
- modules.cloudflare-proxy = {
- enable = true;
- firewall.IPv4Whitelist = [metadata.hosts.muhammed.ipAddress];
- };
-
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. It's perfectly fine and recommended to leave