lorenzo/servers
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refactor Tailscale and Restic Into Common Nixos Modules.

Browse source
This commit is contained in:
Lorenzo Good 2025-02-07 17:14:52 -06:00
parent 6b3755ca06
commit 9df92651ad
Signed by: lorenzo
GPG key ID: 7FCD64BD81180ED0
5 changed files with 110 additions and 47 deletions
Download patch file Download diff file Expand all files Collapse all files

20
machines/lebesgue/config/configuration.nix
View file

@ -16,12 +16,21 @@
signups = false;
envPath = config.sops.secrets.vaultwarden-env.path;
};
};
services.tailscale = {
enable = true;
authKeyFile = config.sops.secrets.tskey.path;
openFirewall = true;
backups.restic = {
enable = true;
repositoryFile = config.sops.secrets.restic-repository.path;
environmentFile = config.sops.secrets.restic-env.path;
passwordFile = config.sops.secrets.restic-password.path;
paths = ["/var/lib/vaultwarden"];
};
tailscale = {
enable = true;
authKeyFile = config.sops.secrets.tskey.path;
};
};
boot.loader.systemd-boot.enable = true;
@ -30,7 +39,6 @@
i18n.defaultLocale = "en_US.UTF-8";
networking.firewall.allowedTCPPorts = [22];
networking.firewall.trustedInterfaces = ["tailscale0"];
system.stateVersion = "24.11";
}