Something went wrong. Try again.
likely broken
Something went wrong. Try again.
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182{config, ...}: { # Forgejo (git forge) with OIDC via ratlogin. The OIDC auth source is a DB # entry, so it is added once after first boot: # sudo forgejo admin auth add-oauth --name ratlogin --provider openidConnect \ # --key forgejo --secret "$(sudo cat /run/secrets/oidc/forgejo)" \ # --auto-discover-url https://auth.daze.lol/.well-known/openid-configuration services.forgejo = { enable = true; useWizard = false; database = { type = "sqlite3"; }; lfs.enable = true; settings = { server = { DOMAIN = "code.daze.lol"; ROOT_URL = "https://code.daze.lol/"; HTTP_ADDR = "127.0.0.1"; HTTP_PORT = 3001; }; service.DISABLE_REGISTRATION = true; }; };
# Vikunja (tasks) with OIDC via ratlogin. services.vikunja = { enable = true; address = "127.0.0.1"; port = 3456; frontendScheme = "https"; frontendHostname = "tasks.daze.lol"; database = { type = "sqlite"; path = "/var/lib/vikunja/vikunja.db"; }; environmentFiles = ["/run/vikunja-oidc.env"]; settings = { auth.local.enabled = false; auth.openid = { enabled = true; redirecturl = "https://tasks.daze.lol/auth/openid/ratlogin"; providers.ratlogin = { name = "ratlogin"; authurl = "https://auth.daze.lol"; clientid = "vikunja"; # clientsecret arrives via VIKUNJA_AUTH_OPENID_PROVIDERS_RATLOGIN_CLIENTSECRET }; }; }; };
# SearXNG (private metasearch). services.searx = { enable = true; environmentFile = config.sops.secrets."searx-env".path; settings = { general.instance_name = "daze search"; search.formats = ["html" "json"]; server = { bind_address = "127.0.0.1"; port = 3016; base_url = "https://search.daze.lol/"; secret_key = "$SEARX_SECRET_KEY"; limiter = true; }; }; redisCreateLocally = true; limiterSettings.botdetection = { trusted_proxies = ["127.0.0.0/8" "::1"]; ip_lists.pass_ip = ["127.0.0.0/8" "::1"]; }; };
sops.secrets."searx-env" = { sopsFile = ../secrets/halo.yaml; owner = "searx"; group = "searx"; mode = "0400"; restartUnits = ["searx.service"]; };}