summaryrefslogtreecommitdiff
path: root/hosts/ahmed/configuration.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/ahmed/configuration.nix')
-rw-r--r--hosts/ahmed/configuration.nix31
1 files changed, 2 insertions, 29 deletions
diff --git a/hosts/ahmed/configuration.nix b/hosts/ahmed/configuration.nix
index 43a170c..27c35eb 100644
--- a/hosts/ahmed/configuration.nix
+++ b/hosts/ahmed/configuration.nix
@@ -3,7 +3,6 @@
{
config,
pkgs,
- metadata,
...
}: {
imports = [
@@ -57,31 +56,11 @@
};
services.cloudflare-dyndns.domains = ["minecraft.linus.onl"];
- # Set up dukse server. Det er satme hårdt at være overduksepåmindelsesansvarlig.
- services.duksebot.enable = true;
-
# Virtual hosts.
+ # Each module for a HTTP service will register a virtual host.
services.nginx.enable = true;
- modules."linus.onl" = {
- enable = true;
- useACME = true;
- };
- modules."notifications.linus.onl" = {
- enable = true;
- useACME = true;
- };
- modules."git.linus.onl" = {
- enable = true;
- useACME = true;
- };
- modules."hellohtml.linus.onl" = {
- enable = true;
- useACME = true;
- };
-
- services.forsvarsarper.enable = true;
- # Configure ACME for various HTTPS services.
+ # Configure ACME. This is used by various HTTP services through the NGINX virtual hosts.
security.acme = {
acceptTerms = true;
defaults.email = "linusvejlo+${config.networking.hostName}[email protected]";
@@ -104,12 +83,6 @@
# Listen for HTTP connections.
networking.firewall.allowedTCPPorts = [80 443];
- # We are running behind CF proxy.
- modules.cloudflare-proxy = {
- enable = true;
- firewall.IPv4Whitelist = [metadata.hosts.muhammed.ipAddress];
- };
-
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. It's perfectly fine and recommended to leave