changed rpi config

This commit is contained in:
Timo Boomers 2025-05-17 15:09:05 +02:00
parent 71390267eb
commit 66f7a1be30
5 changed files with 28 additions and 22 deletions

View File

@ -1,7 +1,9 @@
keys: keys:
- &v-th-ctr-01 age1cs2p7tgk9356tjmet6526k3ghwq9we82nz6z7qggqns656paku6sx30tkg - &v-th-ctr-01 age1cs2p7tgk9356tjmet6526k3ghwq9we82nz6z7qggqns656paku6sx30tkg
- &p-th-rpi-01 age1dd7xpgnak6z6zmwa9889pjd6hmj42zaxq7ea8s47dlk3v6u5f37sldkt97
creation_rules: creation_rules:
- path_regex: secrets/deploy.yaml$ - path_regex: secrets/deploy.yaml$
key_groups: key_groups:
- age: - age:
- *v-th-ctr-01 - *v-th-ctr-01
- *p-th-rpi-01

View File

@ -32,12 +32,19 @@
outputs = inputs@{ self, nixpkgs, nixpkgs-unstable, home-manager, nix-colors, stylix, nixos-cosmic, sops-nix, disko, ... }: outputs = inputs@{ self, nixpkgs, nixpkgs-unstable, home-manager, nix-colors, stylix, nixos-cosmic, sops-nix, disko, ... }:
let let
system = "x86_64-linux"; system = "x86_64-linux";
system-arm = "aarch64-linux";
overlay-unstable = final: prev: { overlay-unstable = final: prev: {
unstable = import nixpkgs-unstable { unstable = import nixpkgs-unstable {
config.allowUnfree = true; config.allowUnfree = true;
localSystem = { inherit system; }; localSystem = { inherit system; };
}; };
}; };
overlay-unstable-arm = final: prev: {
unstable = import nixpkgs-unstable {
config.allowUnfree = true;
localSystem = { inherit system-arm; };
};
};
in in
{ {
nixosConfigurations = { nixosConfigurations = {
@ -163,12 +170,7 @@
pkgs = nixpkgs.legacyPackages.aarch64-linux; pkgs = nixpkgs.legacyPackages.aarch64-linux;
extraSpecialArgs = { inherit inputs nix-colors; }; extraSpecialArgs = { inherit inputs nix-colors; };
modules = [ modules = [
({ config, pkgs, ... }: { nixpkgs.overlays = [ final: prev: { ({ config, pkgs, ... }: { nixpkgs.overlays = [ overlay-unstable ]; })
unstable = import nixpkgs-unstable {
config.allowUnfree = true;
localSystem = { inherit "aarch64-linux"; };
};
} ]; })
./hosts/p-th-rpi-01/home.nix ./hosts/p-th-rpi-01/home.nix
]; ];

View File

@ -40,22 +40,23 @@
containers = { containers = {
network.enable = true; network.enable = true;
nginx.enable = true; nginx.enable = false;
caddy.enable = true; caddy.enable = true;
kanidm.enable = true; kanidm.enable = false;
forgejo.enable = true; forgejo.enable = false;
immich.enable = true; immich.enable = false;
homepage.enable = true; homepage.enable = false;
uptime-kuma.enable = true; uptime-kuma.enable = false;
pingvin-share.enable = true; pingvin-share.enable = false;
vaultwarden.enable = true; vaultwarden.enable = false;
paperless-ngx.enable = true; paperless-ngx.enable = false;
beszel.enable = true; beszel.enable = false;
storage.enable = true; storage.enable = false;
homeassistant.enable = true; homeassistant.enable = false;
karakeep.enable = true; karakeep.enable = false;
vikunja.enable = true; vikunja.enable = false;
stalwart.enable = true; stalwart.enable = false;
static.enable = true;
}; };
}; };

View File

@ -47,7 +47,7 @@ in {
NUXT_PRIVATE_KEY_ID: "${config.sops.placeholder."containers/wrbapp/private-key-id"}" NUXT_PRIVATE_KEY_ID: "${config.sops.placeholder."containers/wrbapp/private-key-id"}"
NUXT_PRIVATE_KEY: "${config.sops.placeholder."containers/wrbapp/private-key"}" NUXT_PRIVATE_KEY: "${config.sops.placeholder."containers/wrbapp/private-key"}"
NUXT_CLIENT_ID: "${config.sops.placeholder."containers/wrbapp/client-id"}" NUXT_CLIENT_ID: "${config.sops.placeholder."containers/wrbapp/client-id"}"
'' '';
}; };
}; };

View File

@ -44,5 +44,6 @@
./containers/karakeep.nix ./containers/karakeep.nix
./containers/vikunja.nix ./containers/vikunja.nix
./containers/stalwart.nix ./containers/stalwart.nix
./containers/static.nix
]; ];
} }