This commit is contained in:
mjallen18
2026-03-24 14:41:22 -05:00
parent 4cc58ab381
commit 84eb2e3734
11 changed files with 799 additions and 48 deletions

View File

@@ -87,6 +87,10 @@ in
enable = true;
port = 8181;
apiKey = config.sops.secrets."jallen-nas/crowdsec-capi".path;
ntfy = {
enable = true;
envFile = config.sops.templates."ntfy.env".path;
};
};
dispatcharr = {
enable = false;
@@ -208,7 +212,7 @@ in
smtpPort = 1025;
imapPort = 1143;
};
restic = {
restic-server = {
enable = true;
port = 8008;
};

View File

@@ -192,7 +192,13 @@ in
# # Power # #
# ###################################################
power.ups = enabled;
power.ups = {
enable = true;
ntfy = {
enable = true;
envFile = config.sops.templates."ntfy.env".path;
};
};
# ###################################################
# # Samba # #
@@ -304,31 +310,34 @@ in
# Configure environment
environment = {
systemPackages = with pkgs; [
attic-client
bcachefs-tools
cryptsetup
clevis
deconz
duperemove
efibootmgr
ffmpeg
ipset
keyutils
nut
packagekit
pass
protonmail-bridge
protonvpn-gui
qrencode
sbctl
systemctl-tui
tigervnc
tpm2-tools
tpm2-tss
] ++ (with pkgs.${namespace}; [
nebula-sign-cert
]);
systemPackages =
with pkgs;
[
attic-client
bcachefs-tools
cryptsetup
clevis
deconz
duperemove
efibootmgr
ffmpeg
ipset
keyutils
nut
packagekit
pass
protonmail-bridge
protonvpn-gui
qrencode
sbctl
systemctl-tui
tigervnc
tpm2-tools
tpm2-tss
]
++ (with pkgs.${namespace}; [
nebula-sign-cert
]);
persistence."/media/nas/main/persist" = {
hideMounts = true;
directories = [

View File

@@ -55,7 +55,7 @@ in
paperless = mkForce disabled;
paperless-ai = mkForce disabled;
protonmail-bridge = mkForce disabled;
restic = mkForce disabled;
restic-server = mkForce disabled;
sunshine = mkForce disabled;
tdarr = mkForce disabled;
unmanic = mkForce disabled;

View File

@@ -72,7 +72,7 @@ in
"paperless"
"paperless-ai"
"protonmail-bridge"
"restic"
"restic-server"
"sparky-fitness"
"sparky-fitness-server"
"sunshine"

View File

@@ -259,6 +259,28 @@ in
"jallen-nas/ntfy/auth-users" = {
sopsFile = defaultSops;
};
"jallen-nas/ntfy/user" = {
sopsFile = defaultSops;
mode = "0440";
owner = "grafana";
group = "keys";
restartUnits = [
"grafana.service"
"crowdsec.service"
"upsmon.service"
];
};
"jallen-nas/ntfy/password" = {
sopsFile = defaultSops;
mode = "0440";
owner = "grafana";
group = "keys";
restartUnits = [
"grafana.service"
"crowdsec.service"
"upsmon.service"
];
};
# ------------------------------
# sparky-fitness
@@ -330,6 +352,20 @@ in
restartUnits = [ "podman-authenticRac.service" ];
};
"ntfy.env" = {
content = ''
NTFY_USER=${config.sops.placeholder."jallen-nas/ntfy/user"}
NTFY_PASSWORD=${config.sops.placeholder."jallen-nas/ntfy/password"}
'';
mode = "0600";
restartUnits = [
"crowdsec.service"
"upsmon.service"
"nix-rebuild-cache.service"
"update-qwen-model.service"
];
};
"paperless.env" = {
content = ''
PAPERLESS_ADMIN_USER = "mjallen"