Merge branch 'main' of ssh://gitea.xeovalyte.dev:2222/xeovalyte/nix

.sops.yaml

@@ -4,4 +4,4 @@ keys:
 creation_rules:
   - path_regex: secrets/deploy.yaml$
     age: >-
-      age1cs2p7tgk9356tjmet6526k3ghwq9we82nz6z7qggqns656paku6sx30tkg,age1dd7xpgnak6z6zmwa9889pjd6hmj42zaxq7ea8s47dlk3v6u5f37sldkt97
+      age1cs2p7tgk9356tjmet6526k3ghwq9we82nz6z7qggqns656paku6sx30tkg,age12gjtehffgmepyga9vaqkurn9fyvte8n7wsklmg866z5usezvuqlsr2m5mp

flake.nix

@@ -147,7 +147,7 @@
 
       # Deploy
       "deploy@p-th-rpi-01" = home-manager.lib.homeManagerConfiguration {
-        pkgs = nixpkgs.legacyPackages.x86_64-linux;
+        pkgs = nixpkgs.legacyPackages.aarch64-linux;
         extraSpecialArgs = { inherit inputs outputs; };
         modules = [
           ./hosts/p-th-rpi-01/home.nix

hosts/v-th-ctr-01/home.nix

@@ -53,7 +53,7 @@
         beszel.enable = true;
         storage.enable = true;
         homeassistant.enable = true;
-        karakeep.enable = true;
+        karakeep.enable = false;
         vikunja.enable = true;
         stalwart.enable = true;
         linkding.enable = true;

modules/home/containers/caddy.nix

@@ -4,6 +4,29 @@ with lib;
 
 let
   cfg = config.settings.containers.caddy;
+
+  generateRoutes = entries: lib.concatMapStrings (route: ''
+    @${route.name} host ${route.host}
+    handle @${route.name} {
+      reverse_proxy ${route.url}
+    }
+  '') entries;
+
+  routesOption = lib.mkOption {
+    type = types.listOf (types.submodule {
+      options = {
+        name = mkOption {
+          type = types.str;
+        };
+        url = mkOption {
+          type = types.str;
+        };
+        host = mkOption {
+          type = types.str;
+        };
+      };
+    });
+  };
 in {
   options = {
     settings.containers.caddy.enable = lib.mkOption {
@@ -13,6 +36,9 @@ in {
         Enable caddy container
       '';
     };
+
+    settings.containers.caddy.routes.tbmrs = routesOption;
+    settings.containers.caddy.routes.tbmrs-local = routesOption;
   };
 
   config = mkIf cfg.enable {
@@ -33,6 +59,49 @@ in {
       ];
     };
 
+    settings.containers.caddy.routes.tbmrs = [
+      {
+        name = "kanidm";
+        host = "auth";
+        url = "https://auth.tbmrs.nl";
+      }
+      {
+        name = "forgejo";
+        host = "git";
+        url = "forgejo:3000";
+      }
+      {
+        name = "immich";
+        host = "photos";
+        url = "immich-server:2283";
+      }
+      {
+        name = "homepage";
+        host = "home";
+        url = "homepage:3000";
+      }
+      {
+        name = "uptime-kuma";
+        host = "uptime";
+        url = "uptime-kuma:3001";
+      }
+      {
+        name = "pingvin-share";
+        host = "share";
+        url = "pingvin-share:3000";
+      }
+      {
+        name = "dufs";
+        host = "files";
+        url = "dufs:5000";
+      }
+      {
+        name = "stalwart";
+        host = "mail";
+        url = "stalwart:8000";
+      }
+    ];
+
     home.file."containers/caddy/Caddyfile".text = ''
       *.tbmrs.nl, tbmrs.nl {
         tls {
@@ -40,50 +109,7 @@ in {
           resolvers 1.1.1.1
         }
 
-        @root host tbmrs.nl
+        ${generateRoutes cfg.routes.tbmrs}
-        handle @root {
-          respond "Hello there"
-        }
-
-        @kanidm host auth.tbmrs.nl
-        handle @kanidm {
-          reverse_proxy https://auth.tbmrs.nl
-        }
-
-        @forgejo host git.tbmrs.nl
-        handle @forgejo {
-          reverse_proxy forgejo:3000
-        }
-
-        @immich host photos.tbmrs.nl
-        handle @immich {
-          reverse_proxy immich-server:2283
-        }
-
-        @homepage host home.tbmrs.nl
-        handle @homepage {
-          reverse_proxy homepage:3000
-        }
-
-        @uptime-kuma host uptime.tbmrs.nl
-        handle @uptime-kuma {
-          reverse_proxy uptime-kuma:3001
-        }
-
-        @pingvin-share host share.tbmrs.nl
-        handle @pingvin-share {
-          reverse_proxy pingvin-share:3000
-        }
-
-        @dufs host files.tbmrs.nl
-        handle @dufs {
-          reverse_proxy dufs:5000
-        }
-
-        @stalwart host mail.tbmrs.nl
-        handle @stalwart {
-          reverse_proxy stalwart:8080
-        }
       }
 
       *.local.tbmrs.nl {

modules/home/containers/network.nix

@@ -3,7 +3,7 @@
 with lib;
 
 let
-  cfg = config.settings.containers.nginx;
+  cfg = config.settings.containers.network;
 in {
   options = {
     settings.containers.network.enable = lib.mkOption {
@@ -18,6 +18,7 @@ in {
   config = mkIf cfg.enable {
     services.podman.networks.proxy = {
       description = "Container network for the proxy";
+      driver = "bridge";
       autoStart = true;
     };
   };

modules/home/containers/static.nix

@@ -19,7 +19,7 @@ in {
     settings.services.sops.enable = true;
 
     services.podman.containers.wrbapp = {
-      image = "gitea.xeovalyte.dev/xeovalyte/wrbapp:latest";
+      image = "gitea.xeovalyte.dev/xeovalyte/wrbapp:latest-arm";
       network = "proxy";
       environmentFile = [
         "${config.sops.templates."container-wrbapp.env".path}"
@@ -27,17 +27,17 @@ in {
     };
 
     services.podman.containers.hunshin = {
-      image = "gitea.xeovalyte.dev/xeovalyte/hunshin:latest";
+      image = "gitea.xeovalyte.dev/xeovalyte/hunshin:latest-arm";
       network = "proxy";
     };
 
     services.podman.containers.bijlobke = {
-      image = "gitea.xeovalyte.dev/xeovalyte/bijlobke:latest";
+      image = "gitea.xeovalyte.dev/xeovalyte/bijlobke:latest-arm";
       network = "proxy";
     };
 
     services.podman.containers.ardsite = {
-      image = "gitea.xeovalyte.dev/ardsite/ardsite:latest";
+      image = "gitea.xeovalyte.dev/ardsite/ardsite:latest-arm";
       network = "proxy";
     };
 

secrets/deploy.yaml

@@ -1,18 +1,22 @@
-example-key: ENC[AES256_GCM,data:+fugS5JmmpnH2CJdDg==,iv:SgpzREfqbgBgd8psV7Optl4nDpMmDBDsitGQZLLSAL0=,tag:WkelSqyePEgAfNo/17BaWw==,type:str]
+example-key: ENC[AES256_GCM,data:ijBs+W5luWy8bD2u9Q==,iv:SgpzREfqbgBgd8psV7Optl4nDpMmDBDsitGQZLLSAL0=,tag:E8lN8xCOye2UPs2x21c0Jw==,type:str]
 containers:
     pingvin-share:
-        oidc-secret: ENC[AES256_GCM,data:NYeCjqcwmBD4TK3Ma1d/OlgCAcgMkOHecGlaNat28ZQtzBJmzjYllcB06F3VUZtq,iv:SnnmXiZoawpZV83483esQ1TIaFTACiIUcA6hcoXsw0I=,tag:iWuZvHe9bqvn/+NOLUkO1Q==,type:str]
+        oidc-secret: ENC[AES256_GCM,data:V8bFxcEfWEJvt0ZRnHRNQhQ2qCsivngRkKyDhupz9HFxBw0BZLb7U2mDothtE1XS,iv:SnnmXiZoawpZV83483esQ1TIaFTACiIUcA6hcoXsw0I=,tag:M3h/ueLRZx1oOzW2WJjJDQ==,type:str]
     linkding:
-        oidc-secret: ENC[AES256_GCM,data:nHY/qyZVK8soqdCgPJfh1gQlh/2+w4CU83+xbpLMQZ0/17qEuh53C1cC5mUXyQjV,iv:IlbwHY8BXB93L0UYDU9jmbXX7s6ovHQp9BUAmDBhgwk=,tag:VqaIRKeNUTPScsaLQ0H6VQ==,type:str]
+        oidc-secret: ENC[AES256_GCM,data:2KP6B7s9fKyg6PHKzWvvqe5TcrFvl80goQ8Gy91pW6CwOZWywcNnwsnrrSjpJL9O,iv:IlbwHY8BXB93L0UYDU9jmbXX7s6ovHQp9BUAmDBhgwk=,tag:0pnhkJVVQTYd5Jy9yPz+Kw==,type:str]
     beszel:
-        key: ENC[AES256_GCM,data:pnk1AUQvhdj4WJOqSB+3bnuNYeOU3xucacLVnUY8D8ulXJUOs1UOc3rlv27IGEbGurEWmbrghDZlIyM91jtWQZN4P2SpwR18ry6PJVYKXCY=,iv:OS/+jF4MtwPdijXPpG2pgpJQTYyer9bms97B+kO8XhI=,tag:G+6ur+SwFJS5Sq69hl2faA==,type:str]
+        key: ENC[AES256_GCM,data:BfhgCX2Ws/xpQ2Nz+qJv04Ag99pmOtD8js2Yq0vNEoRb7KGeoeBiJSepbXPZNWkdyRztXA/LPEbcVCQwmCzu3+emcAvsVRTX41Bxt9nQ2Kw=,iv:OS/+jF4MtwPdijXPpG2pgpJQTYyer9bms97B+kO8XhI=,tag:AYhQltmzceVaTuM//mtFYw==,type:str]
     karakeep:
-        nextauth-secret: ENC[AES256_GCM,data:YnQSbdAPY/xrxmC9EkBQPrzFgICz1RHTJ5h0xyTiyAxxpFcRNfpKBYWvqF+NeHiW,iv:98su3bR8jMLr1jF5XBiNePMZ7qz4pMDQ6B4i8rMxIQQ=,tag:txbcEGLvr/HBn61PmUgTUQ==,type:str]
+        nextauth-secret: ENC[AES256_GCM,data:Izp5kO9dhD28mUzHOS4TqBINbbQ03spP865nrfUWbhqpx2dgW/rbExFZDXmgp1tX,iv:98su3bR8jMLr1jF5XBiNePMZ7qz4pMDQ6B4i8rMxIQQ=,tag:gyzJA6dsKy6YWkE8r5JXqg==,type:str]
-        meili-key: ENC[AES256_GCM,data:yMERcqjZqaDdOx/uRvt2ZsQoT278sC3Vq1RxpLWerUT22Zrs+3mj5AGgN3lLNlZf,iv:OjAmWJWmGtIsSeIFWNlqT8hv8H8LLz+WQtvlvyu9Lx0=,tag:qCdXS5J1r8rziVq0+8FX/Q==,type:str]
+        meili-key: ENC[AES256_GCM,data:47t3gk/189dmtriOb37MT4XC2pwBdwr2n+22t3K7q8Hf6tX2iHaq6zg1EV6W51F/,iv:OjAmWJWmGtIsSeIFWNlqT8hv8H8LLz+WQtvlvyu9Lx0=,tag:v4acQvlJPK64l0yCVpBqCQ==,type:str]
+    wrbapp:
+        private-key-id: ENC[AES256_GCM,data:VEPNv774ZI+5IAM43BSKJr7LoGYquUpLTk3iE4xObSscDtr/pVTnZQ==,iv:HVZHRU3v/REhrb9DTsKLyfryROU2WkPzg6tM0wz8Myc=,tag:rfjNGz5B526nvLw4Pj8hQw==,type:str]
+        private-key: ENC[AES256_GCM,data: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,iv:rMdIIc6MszxdOGX5rPQNqNrK7RbleEbKhFVcx4oWUZk=,tag:ti7O+u8PYNj2eKF7+jUfWQ==,type:str]
+        client-id: ENC[AES256_GCM,data:rVWPkR8RUhJL0vsUFNxBuqgfJBm4,iv:7WbzSt04QPcEf86eduT3R3K29tfVlQ6bWdBjSAHIf40=,tag:6OiHIR+7ncX4gMnH6ePj8w==,type:str]
     paperless-ngx:
-        db-password: ENC[AES256_GCM,data:9cnGnjko/464Cc6i7CXtZ+60OS27De7p4p4evbBMjjAUhdJL5O2UgX/J4No0/EG+8YncF6qvA0RHRkXh+Wwm1w==,iv:tDIRfThBOfHr+gGRqywlHAk/x4MkhHRFsJEp5nnlGPA=,tag:QQeAMjvLeVQ5H0o1cmA42w==,type:str]
+        db-password: ENC[AES256_GCM,data:Trlr577CSZHBdaIya/UwAYGPq7Td+f7k7QeNWbpz41sIEEuBGtiOXaAi17292E2nhBCLMDsrugGVusugBo+Z7g==,iv:tDIRfThBOfHr+gGRqywlHAk/x4MkhHRFsJEp5nnlGPA=,tag:3LeYyRjgA/ZOIaFsrcEZGQ==,type:str]
-        secret: ENC[AES256_GCM,data:7kCxlAL1S5gqMyNcI8HcP/qvXv4UavQ3mnwUAIvFebTMG9o87XuK49NyJ3r+DDfxBiM13+qh4KF0+1orv+Oa8w==,iv:zzhFaoLnskspp1S291KABLZITgcof63cjShnsZrlAmw=,tag:ge8XbQdIsuR9LVIYPdrxWw==,type:str]
+        secret: ENC[AES256_GCM,data:eS/hG9A87fcop0Wey8HVLM8wwVQfzN9pmxhos9GkmtW0b9lsrjq/A2k2ngyJFNN+YKTqVIATD0VbQ28WvWRj1A==,iv:zzhFaoLnskspp1S291KABLZITgcof63cjShnsZrlAmw=,tag:ZxHsyxJSfVVSaOTlDuByCw==,type:str]
-        openid-providers: ENC[AES256_GCM,data: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,iv:ba2bri2F/B6Sp3HfpXVWZ/WMVFOPF4+DyAtdS56yNqQ=,tag:ggm6O+5xR/VB7sw8Bn77Sg==,type:str]
+        openid-providers: ENC[AES256_GCM,data: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,iv:ba2bri2F/B6Sp3HfpXVWZ/WMVFOPF4+DyAtdS56yNqQ=,tag:k+tPX9QDGhgLYgNC/C9kKw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -22,14 +26,23 @@ sops:
         - recipient: age1cs2p7tgk9356tjmet6526k3ghwq9we82nz6z7qggqns656paku6sx30tkg
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHdnBiVVl0czBaT01zMmRP
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGWWk1WE8wS1RneSswWmhj
-            ZEMzQUg2T1NlOU1qQzNTSTJ4aVhJd0JuY0hNCmVUMThGM0VjU1RHaVljUFhQVkVn
+            TTgzYk1tbEdiRkl2WGcwVU9RY2YwZk9ZTzJnCm8yWDVlMXIzb1hEOFI4WVl2N3NN
-            RTVkQllmY3Y4MVEvMDRFcXRtUkZEcUEKLS0tIDlNaVZRay9aOXBhbWd6M0ZjdHRZ
+            Ny9VUDI1R3JTeVRmL2lsQkk0dGU4bVkKLS0tIDRxT0xzdXZUUTJxcjlDdHRJc25D
-            YW9ScGtXMCtlTnFKZU1uSGxlNzhrY3cKkIJgEglWVxmgMx805z9hhkxM2Igbn3OF
+            aXB4WTVoYUNXRFVCZkhnYXlsV1MxaW8KFJf3ufkinpKEG8YAAjGURUq/+p+RpaAF
-            9xXdHBqaWC+pepYoYyNSA8gnptto3I5BPsC5p9RSAI8bQLsi2ciR5Q==
+            kUTvl95nvmED73OcLLn6wCssoSPsi2iJWWY/7QeBh5KbGjz1ofTb1Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-05-19T09:10:03Z"
+        - recipient: age12gjtehffgmepyga9vaqkurn9fyvte8n7wsklmg866z5usezvuqlsr2m5mp
-    mac: ENC[AES256_GCM,data:DYG42CpouwjfjLD5XV89sDPtRO3KbF54lD1VTjEziPIUl97GSj2a6ssY3/Z8IOkgSJ/09NHi3cucbG5Aakb7P4dvdxzQTmeV2rpQU/ZkxGJN6Au16AtuQlbFhyIYEO/cbUBgzt2FOYjwoO+IqbOCssY3lEnJf/MyypoiLmCNsF0=,iv:ftnnOu+6ufgrgkf8BzuMxQDpvRbjCPDWNWFXHsrqTr8=,tag:GchjRRn5k4FoMTANvJXZ8Q==,type:str]
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBldkJ3c2E0Yjdvd3dhd0hM
+            WTVCdFkxSGU1N3ZpT0s4UENmUjRTNGJYWHpnCkJna3lCTjR3MlAwZU02TkV5RnhK
+            anR3dVg4MDN4Wk05WDdEOTlBUDNRMmsKLS0tIFFUL1FVOTcxK1NkaEJOaGdRbGdn
+            SzhxRnVPMHg0VzJzZWhYdGZndHVIL0UKgloohouQu5rN48hy5FvouHlZO1RoIG9W
+            DlMH50012l4kcQ3ggP0BwuWRUq4FQ/bEpSBZoIOQriPmPQQp1qXOdA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-05-20T15:30:19Z"
+    mac: ENC[AES256_GCM,data:LHel3MmVvQ/TwEYQePjCNRZxmipPyJtssltyAIjSqdxSN6s7Kp4rbnAWSM6D/k7fVtasCCmWcqlbnHBH+M06/dIGhhjjL7HRPBj0jKgDlct7FshHAI5m+ZjrWMyzKOlKUj+2Il1d7VCdMKvC10jXoylpiunaHksaQMvagWAXDFc=,iv:0y/VL/eUw7p+u/ifnzXbZIyEfZNTv0aV5w7A9FT9A4w=,tag:RLAPe1C3DXOHjhLWM8TfEA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.4