motiejus/config
1
Fork 0
Code Packages Releases Activity

syncthing

Browse Source
This commit is contained in:
Motiejus Jakštys 2023-07-26 11:36:54 +03:00
parent 77c40d676d
commit 4f1aa85659
5 changed files with 116 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
data.nix
View File

@ -16,12 +16,22 @@ rec {
publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHtYsaht57g2sp6UmLHqsCK+fHjiiZ0rmGceFmFt88pY";
initrdPubKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKns3+EIPqKeoB5OIxANIkppb5ICOmkW8X1DOKJPeRWr";
publicIP = "88.223.107.21";
jakstIP = "100.89.176.4";
};
"hel1-a.servers.jakst" = {
extraHostNames = ["hel1-a.jakstys.lt" "git.jakstys.lt" "vpn.jakstys.lt" "jakstys.lt" "www.jakstys.lt"];
publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF6Wd2lKrpP2Gqul10obMo2dc1xKaaLv0I4FAnfIaFKu";
initrdPubKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEzt0eaSRTAfM2295x4vACEd5VFqVeYJPV/N9ZUq+voP";
publicIP = "65.21.7.119";
jakstIP = "100.89.176.3";
};
"fwmine.motiejus.jakst" = {
publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIPi4N6NhUjAwZNSbi/Eb9zliZtrCzNEHmKb4UGRsJqF";
jakstIP = "100.89.176.6";
};
"mxp10.motiejus.jakst" = {
publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIy9IR7Jq3hRZ5JgwfmeCgSKFrdgujnZt79uxDPVi3tu";
jakstIP = "100.89.176.1";
};
"zh2769.rsync.net" = {
publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJtclizeBy1Uo3D86HpgD3LONGVH0CJ0NT+YfZlldAJd";

3
hosts/hel1-a/configuration.nix
View File

@ -90,7 +90,6 @@ in {
isSystemUser = true;
uid = myData.uidgid.gitea;
};
};
groups = {
@ -426,7 +425,7 @@ in {
networking = {
hostName = "hel1-a";
domain = "jakstys.lt";
domain = "servers.jakst";
firewall = let
coturn = with config.services.coturn; [
{

9
hosts/vno1-oh2/configuration.nix
View File

@ -35,6 +35,13 @@
};
};
services.syncthing = {
enable = true;
dataDir = "/home/motiejus/";
user = "motiejus";
group = "users";
};
services.zfsunlock = {
enable = true;
targets."hel1-a.servers.jakst" = {
@ -89,7 +96,7 @@
networking = {
hostId = "f9117e1b";
hostName = "vno1-oh2";
domain = "jakstys.lt";
domain = "servers.jakst";
defaultGateway = "192.168.189.4";
nameservers = ["192.168.189.4"];
interfaces.enp3s0.ipv4.addresses = [

1
modules/services/default.nix
View File

@ -5,6 +5,7 @@
...
}: {
imports = [
./syncthing
./zfsunlock
];
}

96
modules/services/syncthing/default.nix Normal file
View File

@ -0,0 +1,96 @@
{
config,
lib,
myData,
...
}: let
guiPort = 8384;
in {
options.mj.services.syncthing = with lib.types; {
enable = lib.mkEnableOption "Enable services syncthing settings";
user = lib.mkOption {type = str;};
group = lib.mkOption {type = str;};
dataDir = lib.mkOption {type = path;};
};
config = lib.mkIf config.mj.services.syncthing.enable {
networking.firewall.extraCommands = let
hosts = lib.attrVals ["mxp10.motiejus.jakst" "fwmine.motiejus.jakst"] myData.hosts;
ips = lib.catAttrs "jakstIP" hosts;
lines = map (ip: "iptables -A INPUT -p tcp --dport 8384 -s ${ip} -j ACCEPT") ips;
in
lib.concatLines lines;
services.syncthing = {
enable = config.mj.services.syncthing.enable;
openDefaultPorts = true;
guiAddress = let
fqdn = with config.networking; "${hostName}.${domain}";
jakstIP = lib.getAttrFromPath [fqdn "jakstIP"] myData.hosts;
guiPortStr = builtins.toString guiPort;
in "${jakstIP}:${guiPortStr}";
user = config.mj.services.syncthing.user;
group = config.mj.services.syncthing.group;
dataDir = config.mj.services.syncthing.dataDir;
extraOptions.gui.insecureAdminAccess = true;
devices =
{}
// (lib.optionalAttrs (config.networking.hostName == "vno1-oh2") {
"fwmine".id = "GKSUKZE-AOBQOWY-CNLZ2ZI-WNKATYE-MV4Y452-J3VCJ5C-EAANXRX-2P6EHA6";
"mxp10".id = "LO54QZZ-5J3G62P-WUVM3MW-7J3VWHD-BG76TOQ-5S7PZSY-JU45K3I-X3ZL4AN";
"rzj-744P2PE".id = "UW6ISH2-NW6X6AW-BJR76TV-TV3BIGZ-PA5QH2M-YEF567T-IWMHKD5-P3XHHAH";
})
// {};
folders = {
"${config.services.syncthing.dataDir}/annex2/Books" = {
devices = ["mxp10" "fwmine"];
id = "8lk0n-mm63y";
label = "Books";
};
"${config.services.syncthing.dataDir}/annex2/M-Active" = {
devices = ["mxp10" "fwmine"];
id = "f6fma-unkxq";
label = "M-Active";
};
"${config.services.syncthing.dataDir}/annex2/M-Camera" = {
devices = ["mxp10" "fwmine"];
id = "pixel_xl_dtm3-photos";
label = "M-Active";
};
"${config.services.syncthing.dataDir}/annex2/M-Documents" = {
devices = ["fwmine"];
id = "4fu7z-z6es2";
label = "M-Documents";
};
"${config.services.syncthing.dataDir}/annex2/R-Documents" = {
devices = ["rzj-744P2PE"];
id = "nm23h-aog6k";
label = "R-Documents";
};
"${config.services.syncthing.dataDir}/annex2/Pictures" = {
devices = ["fwmine"];
id = "d3hur-cbzyw";
label = "Pictures";
};
"${config.services.syncthing.dataDir}/stud-cache" = {
devices = ["fwmine"];
id = "2kq7n-jqzxj";
label = "stud-cache";
};
"${config.services.syncthing.dataDir}/video/shared" = {
devices = ["mxp10" "fwmine"];
id = "byzmw-f6zhg";
label = "video-shared";
};
"${config.services.syncthing.dataDir}/music" = {
devices = ["fwmine" "mxp10"];
id = "tg94v-cqcwr";
label = "music";
};
};
};
};
}