decentralize

This commit is contained in:
2025-08-07 18:15:57 -05:00
parent 35ab989fcb
commit 4670959413
6 changed files with 24 additions and 15 deletions

View File

@@ -97,21 +97,7 @@
hostName = "homebox"; hostName = "homebox";
nameservers = [ "1.1.1.1" "1.0.0.1" ]; nameservers = [ "1.1.1.1" "1.0.0.1" ];
networkmanager.enable = true; networkmanager.enable = true;
firewall.allowedTCPPorts = lib.mkIf config.sysconfig.opts.virtualization.traefik.enable [ 22 80 443 ];
firewall.interfaces."ve-traefik".allowedTCPPorts = lib.mkIf config.sysconfig.opts.virtualization.traefik.enable [
8080
8123
];
firewall.interfaces."ve-novnc" = lib.mkIf config.sysconfig.opts.virtualization.novnc.enable {
allowedTCPPorts = [ 5900 ];
allowedUDPPorts = [ 5900 ];
};
hosts = {
"192.168.100.11" = lib.mkIf config.sysconfig.opts.virtualization.traefik.enable [ "blunkall.us" "*.blunkall.us" ];
"192.168.100.20" = lib.mkIf config.sysconfig.opts.virtualization.gitea.enable [ "gitea.blunkall.us" ];
"192.168.100.21:5678" = lib.mkIf config.sysconfig.opts.virtualization.n8n.enable [ "n8n.local" ];
"192.168.100.25:8123" = lib.mkIf config.sysconfig.opts.virtualization.homeassistant.enable [ "hass.local" ];
};
nftables = {}; nftables = {};
nat = { nat = {
enable = true; enable = true;

View File

@@ -7,6 +7,8 @@
config = lib.mkIf config.sysconfig.opts.virtualization.gitea.enable { config = lib.mkIf config.sysconfig.opts.virtualization.gitea.enable {
networking.hosts."192.168.100.20" = [ "gitea.blunkall.us" ];
sops.secrets = { sops.secrets = {
"gitea/dbpass" = {}; "gitea/dbpass" = {};
}; };

View File

@@ -13,6 +13,8 @@
config = lib.mkIf config.sysconfig.opts.virtualization.homeassistant.enable { config = lib.mkIf config.sysconfig.opts.virtualization.homeassistant.enable {
networking.hosts."192.168.100.25" = [ "hass.local" ];
containers.home-assistant = { containers.home-assistant = {
autoStart = true; autoStart = true;
@@ -34,6 +36,7 @@
config = { config = {
homeassistant.unit_system = "us_customary"; homeassistant.unit_system = "us_customary";
http.server_port = 80;
}; };
configWritable = true; configWritable = true;

View File

@@ -7,6 +7,8 @@
config = lib.mkIf config.sysconfig.opts.virtualization.n8n.enable { config = lib.mkIf config.sysconfig.opts.virtualization.n8n.enable {
networking.hosts."192.168.100.21" = [ "n8n.local" ];
containers.n8n = { containers.n8n = {
autoStart = true; autoStart = true;
@@ -41,6 +43,8 @@
N8N_DIAGNOSTICS_CONFIG_BACKEND = ""; N8N_DIAGNOSTICS_CONFIG_BACKEND = "";
N8N_SECURE_COOKIE = "false"; N8N_SECURE_COOKIE = "false";
N8N_PORT = 80;
}; };
}; };

View File

@@ -7,6 +7,15 @@
config = lib.mkIf config.sysconfig.opts.virtualization.novnc.enable { config = lib.mkIf config.sysconfig.opts.virtualization.novnc.enable {
networking = {
hosts."192.168.100.30" = [ "novnc.local" ];
firewall.interfaces."ve-novnc" = lib.mkIf config.sysconfig.opts.virtualization.novnc.enable {
allowedTCPPorts = [ 5900 ];
allowedUDPPorts = [ 5900 ];
};
};
containers.novnc = { containers.novnc = {
autoStart = true; autoStart = true;

View File

@@ -7,6 +7,11 @@
config = lib.mkIf config.sysconfig.opts.virtualization.traefik.enable { config = lib.mkIf config.sysconfig.opts.virtualization.traefik.enable {
networking = {
hosts."192.168.100.11" = [ "blunkall.us" "*.blunkall.us" "traefik.local" ];
firewall.allowedTCPPorts = [ 22 80 443];
};
containers.traefik = { containers.traefik = {
autoStart = true; autoStart = true;