ctucx.git: nixfiles

ctucx' nixfiles

commit 7fbab4e4cc78ec7cd3122ff9fa9b81a74b2c698b
parent 65d833be800ba23ad3107b1f607d4612f7cb6960
Author: Leah (ctucx) <git@ctu.cx>
Date: Sun, 3 Dec 2023 17:45:20 +0100

machines/briefkasten/websites/things.home.ctu.cx: move to machine `trabbi`
7 files changed, 42 insertions(+), 43 deletions(-)
diff --git a/machines/briefkasten/websites/default.nix b/machines/briefkasten/websites/default.nix
@@ -5,7 +5,6 @@
   imports = [
     ./wiki.home.ctu.cx.nix
     ./music.home.ctu.cx.nix
-    ./things.home.ctu.cx.nix
 #    ./storage.home.ctu.cx
 
     ./photos.ctu.cx.nix
diff --git a/machines/briefkasten/websites/things.home.ctu.cx.nix b/machines/briefkasten/websites/things.home.ctu.cx.nix
@@ -1,28 +0,0 @@
-{ inputs, config, pkgs, lib, ... }:
-
-{
-
-  imports = [
-    inputs.ctucx-things.nixosModule
-  ];
-
-  dns.zones."ctu.cx".subdomains."things.home".CNAME = lib.mkIf config.networking.usePBBUplink [ "${config.networking.fqdn}." ];
-
-  age.secrets.restic-ctucx-things.file = ./. + "/../../../secrets/${config.networking.hostName}/restic/ctucx-things.age";
-
-  restic-backups.things = {
-    user            = "ctucx-things";
-    passwordFile    = config.age.secrets.restic-ctucx-things.path;
-    paths           = [ "/var/lib/ctucx-things" ];
-  };
-
-  services.ctucx-things = {
-    enable      = true;
-    storagePath = "/var/lib/ctucx-things";
-    nginx.enable     = true;
-    nginx.enableACME = true;
-    nginx.domain     = "things.home.ctu.cx";
-  };
-
-}
-
diff --git a/machines/trabbi/websites/default.nix b/machines/trabbi/websites/default.nix
@@ -5,6 +5,7 @@
   imports = [
     ./ctu.cx.nix
     ./bikemap.ctu.cx.nix
+    ./things.ctu.cx.nix
   ];
 
 }
diff --git a/machines/trabbi/websites/things.ctu.cx.nix b/machines/trabbi/websites/things.ctu.cx.nix
@@ -0,0 +1,28 @@
+{ inputs, config, pkgs, lib, ... }:
+
+{
+
+  imports = [
+    inputs.ctucx-things.nixosModule
+  ];
+
+  dns.zones."ctu.cx".subdomains."things".CNAME = [ "${config.networking.fqdn}." ];
+
+  age.secrets.restic-ctucx-things.file = ./. + "/../../../secrets/${config.networking.hostName}/restic/ctucx-things.age";
+
+  restic-backups.things = {
+    user            = "ctucx-things";
+    passwordFile    = config.age.secrets.restic-ctucx-things.path;
+    paths           = [ "/var/lib/ctucx-things" ];
+  };
+
+  services.ctucx-things = {
+    enable      = true;
+    storagePath = "/var/lib/ctucx-things";
+    nginx.enable     = true;
+    nginx.enableACME = true;
+    nginx.domain     = "things.ctu.cx";
+  };
+
+}
+
diff --git a/secrets/briefkasten/restic/ctucx-things.age b/secrets/briefkasten/restic/ctucx-things.age
@@ -1,13 +0,0 @@
------BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5dS9CVXloMHFvTjV1QlZv
-d3AwcEpHM3ZmNURkaUlsbVRzUGxDRjVoMURnCk1qSkdOVEZSN0w2ZUg5bGhRT2NV
-NWsrUXNsNmN2U0wzZGxLMHJDRWdxdWMKLT4gc3NoLWVkMjU1MTkgNGhLQ013IGtJ
-TW1GUW5pTERvK2wwVnJ4cTUyRkx1RnVYNUIweTFCNHdaaWtKSm9GaUEKaGFZRXd6
-aEVyVEh1SWlKQlhKK2x4Yi9nYmxuWWJDZkpGNXdxMi9VM3g5awotPiArLWdyZWFz
-ZSBYVEpOYHxEIGNlI2d0UGw6ClJCajZueWVQR05UdnA5eFB4QS9lb0U5UlZORlpL
-L1Y2TzZsSXo1RUtESDdDRHZ1cjM4OVZiQ0hqNGVrdkxtVjYKQkxMczBYbUFYa1RM
-WHV5cmUycDgKLS0tIExSc1pPbmFMK2hRYnd3UnFZNUs4MXZtOXg4T0Y2eUdxdGxr
-L0loc0xVNGMKR1wni1wsSz2zABGS2vFm0uK3wVgst76JkfibG8hWXCpnkC0PejUk
-J1qo/s4MnEsMbF7za0vXJdQjaOngHuuPPCVxBveeB3bVEwK17hy2lbUNDaDmtKAW
-puXujgLFlsQb
------END AGE ENCRYPTED FILE-----
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
@@ -57,7 +57,6 @@ in {
 
   "briefkasten/restic/gotosocial.age".publicKeys                    = [ leah briefkasten ];
   "briefkasten/restic/influxdb.age".publicKeys                      = [ leah briefkasten ];
-  "briefkasten/restic/ctucx-things.age".publicKeys                  = [ leah briefkasten ];
 
   "briefkasten/restic/syncthing-audiobooks-orig.age".publicKeys     = [ leah briefkasten ];
   "briefkasten/restic/syncthing-audiobooks.age".publicKeys          = [ leah briefkasten ];

@@ -84,6 +83,7 @@ in {
   "trabbi/restic/matrix-synapse.age".publicKeys                     = [ leah trabbi ];
   "trabbi/restic/mail.age".publicKeys                               = [ leah trabbi ];
   "trabbi/restic/gotosocial.age".publicKeys                         = [ leah trabbi ];
+  "trabbi/restic/ctucx-things.age".publicKeys                       = [ leah trabbi ];
 
   "trabbi/mail/password-leah-ctu.cx.age".publicKeys                 = [ leah trabbi ];
   "trabbi/mail/password-vaultwarden-ctu.cx.age".publicKeys          = [ leah trabbi ];
diff --git a/secrets/trabbi/restic/ctucx-things.age b/secrets/trabbi/restic/ctucx-things.age
@@ -0,0 +1,12 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzM1dBR3lQVXdFMXdBOFdn
+UUU4cjhDYnNZYVBjUzVtUUNWTmE1OVQ5dGxFCmlleit4cHcxeHhQQThPM1Avd2Ja
+a0t1U0JSTzRjODhGUk1SUW9qRTBFaVUKLT4gc3NoLWVkMjU1MTkgVjB1VXJ3IEhS
+RnRGbjRMaVJwcnpVTS8vUjBjRVdxSndhd1ltTGh3cU1hZ1NoTC94MEkKZnE3ZVA2
+MkNJbEpRQ09SRGlKa3lhUDBGcXZ6TURjTkVLTWNLTHE0OEtGcwotPiAkei5AbjAt
+Z3JlYXNlIHRoIFIgXDQ9c21oIE1pPCpzCjhKMWZReUE1V2Z2T3Bqd0VUT0prbzJL
+UndEZ0V4VjZCcjFZCi0tLSBxNldTdXAvcWNjRnZaV3NSd0hMVmZ4dndpQjdFWExW
+MVJjZTlIMFhVbU53Csqcr64Nr/PEjQq3a+NgnbmXt6w5gqhq8OvdCmXkqdgMqOj1
+qe1Z6PnZ/H30T65LtTfST2fVJkypliokh/JmizR1Zb+phDe+Em35igya5qlm30LZ
+yYgXbR6Uat7EWSsavg==
+-----END AGE ENCRYPTED FILE-----