decentralize

system-config/services/containers/gitea/default.nix

@@ -7,6 +7,8 @@
 
     config = lib.mkIf config.sysconfig.opts.virtualization.gitea.enable {
 
+        networking.hosts."192.168.100.20" = [ "gitea.blunkall.us" ];
+        
         sops.secrets = {
             "gitea/dbpass" = {};
         };

system-config/services/containers/homeassistant/default.nix

@@ -13,6 +13,8 @@
 
     config = lib.mkIf config.sysconfig.opts.virtualization.homeassistant.enable {
 
+        networking.hosts."192.168.100.25" = [ "hass.local" ];
+
         containers.home-assistant = {
 
             autoStart = true;
@@ -34,6 +36,7 @@
 
                     config = {
                         homeassistant.unit_system = "us_customary";
+                        http.server_port = 80;
                     };
 
                     configWritable = true;

system-config/services/containers/n8n/default.nix

@@ -6,6 +6,8 @@
     };
 
     config = lib.mkIf config.sysconfig.opts.virtualization.n8n.enable {
+        
+        networking.hosts."192.168.100.21" = [ "n8n.local" ];
 
         containers.n8n = {
 
@@ -41,6 +43,8 @@
                         N8N_DIAGNOSTICS_CONFIG_BACKEND = "";
 
                         N8N_SECURE_COOKIE = "false";
+
+                        N8N_PORT = 80;
                     };
                 };
 

system-config/services/containers/novnc/default.nix

@@ -7,6 +7,15 @@
 
     config = lib.mkIf config.sysconfig.opts.virtualization.novnc.enable {
 
+        networking = {
+            hosts."192.168.100.30" = [ "novnc.local" ];
+
+            firewall.interfaces."ve-novnc" = lib.mkIf config.sysconfig.opts.virtualization.novnc.enable {
+                allowedTCPPorts = [ 5900 ];
+                allowedUDPPorts = [ 5900 ];
+            };
+        };
+
         containers.novnc = {
 
             autoStart = true;

system-config/services/containers/traefik/default.nix

@@ -6,6 +6,11 @@
     };
 
     config = lib.mkIf config.sysconfig.opts.virtualization.traefik.enable {
+            
+        networking = {
+            hosts."192.168.100.11" = [ "blunkall.us" "*.blunkall.us" "traefik.local" ];
+            firewall.allowedTCPPorts = [ 22 80 443];
+        };
 
         containers.traefik = {