r1: basic auth

hosts/fwminex/configuration.nix

@@ -26,6 +26,10 @@ in
     syncthing-key.file = ../../secrets/fwminex/syncthing/key.pem.age;
     syncthing-cert.file = ../../secrets/fwminex/syncthing/cert.pem.age;
     frigate.file = ../../secrets/frigate.age;
+    r1-htpasswd = {
+      file = ../../secrets/r1-htpasswd.age;
+      owner = "nginx";
+    };
 
     ssh8022-server = {
       file = ../../secrets/ssh8022.age;
@@ -334,14 +338,13 @@ in
       };
     };
 
-    nginx.defaultHTTPListenPort = 8081;
+    nginx = {
+      defaultHTTPListenPort = 8081;
+      virtualHosts."r1.jakstys.lt".basicAuthFile = config.age.secrets.r1-htpasswd.path;
+    };
     frigate = {
       enable = true;
-      hostname =
-        let
-          fqdn = "${config.networking.hostName}.${config.networking.domain}";
-        in
-        "${myData.hosts.${fqdn}.jakstIP}";
+      hostname = "r1.jakstys.lt";
       settings = {
         detectors = {
           #coral = {

secrets.nix

@@ -61,6 +61,7 @@ in
   "secrets/vaultwarden/secrets.env.age"
   "secrets/letsencrypt/account.key.age"
   "secrets/frigate.age"
+  "secrets/r1-htpasswd.age"
 
   "secrets/synapse/jakstys_lt_signing_key.age"
   "secrets/synapse/registration_shared_secret.age"

secrets/r1-htpasswd.age

@@ -0,0 +1,13 @@
+age-encryption.org/v1
+-> ssh-ed25519 fqSa6A gAyHn3TCUHeWNQ2GrAB/HP9A2fngUYq5xRyOus749w8
+lJyA2wG7QLST+8W2kzrSJeI7FNKGy26dhm53SyFJ5QE
+-> X25519 fApAhKsjwQCVpHrsqkSLF89E0LRt1FQoTNBC+nn2D0Y
+hB1Hxgpja3P3KvmwdIRXBk33egdDBclNfv6DT7PKtxw
+-> X25519 NxxoMcNAeE0q6UJ12NmhWAlpEdksDI9dUVC1oG9EWSo
+bn4gmYGzWMQ2UVdYUhjFAZs3voremlZfnol+B7b66Us
+-> piv-p256 +y2G/w ArI7pLmDgi1uVV6Nsw5jDFGxvU169OTc1Jeqfwbfz1R1
+dB8UGSF6haHvbStyqpKwgphOEnW1Xg4qvwiaHWiAjB0
+-> piv-p256 jNqd3A AlxN+Mq8PhnP1etx9I6JllGFwSAB3UQXOfFKy5Oq73w+
+nLIfdVnbqHSqzNYkHnYzQLXkiLbDssPbks8u0Og5+pI
+--- 1ub942pMBPMExIhaNR+ZsDBxz27Thc1D6yH8tQwhIqs
+MJ;—Ü=N,ß󩬛éws¨•ûȯ‡öÀíJd2™t±ƒ›ö`@Õ»ô$i@V;÷¸f-æD1 ì´í2n'¢”!âûå¯ÿÛ¿«ZÀ;$~ï—có±T‚{û¨ÔBzæÃ%˜Ê›|]u–J.³‘_!.¤ºJÇ,k!ª7ñkU8?{mE¯3©Ž~F±%ç®ÇX5<58>