oqyude/nixos
1
0
Fork 0
mirror of https://github.com/oqyude/nixos.git synced 2026-06-11 04:30:41 +03:00
Code Issues Packages Projects Releases Wiki Activity

so mad

Browse Source
This commit is contained in:
Jor Oqyude
2025-08-07 01:46:58 +03:00
parent 185d6e22b4
commit de44801150
62 changed files with 5 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/vds/cloudflared.nix
-75
View File
@@ -1,75 +0,0 @@
{ inputs, ... }@flakeContext:
{
config,
lib,
pkgs,
...
}:
{
services = {
cloudflared = {
enable = false;
certificateFile = "${inputs.zeroq-credentials}/services/cloudflared/cert.pem";
tunnels = {
"58b340ee-e98a-4af9-b786-74600c71f49e" = {
credentialsFile = "${inputs.zeroq-credentials}/services/cloudflared/server.json";
warp-routing.enabled = true;
ingress = {
"immich.zeroq.ru" = {
service = "http://sapphira.latxa-platy.ts.net:2283";
};
"nextcloud.zeroq.ru" = {
service = "http://sapphira.latxa-platy.ts.net:10000";
};
"llm.zeroq.ru" = {
service = "http://atoridu.latxa-platy.ts.net:11111";
};
};
default = "http_status:404";
};
# "58b340ee-e98a-4af9-b786-74600c71f49e" = {
# credentialsFile = "${inputs.zeroq.dirs.server-credentials}/cloudflared/server.json";
# warp-routing.enabled = true;
# ingress = {
# "nextcloud.zeroq.ru" = {
# service = "http://localhost:10000";
# };
# };
# default = "http_status:404";
# };
};
};
};
# users.users = {
# cloudflared = {
# group = "cloudflared";
# isSystemUser = true;
# };
# };
# users.groups.cloudflared = { };
#
# systemd.services.cloudflared = {
# after = [
# "network.target"
# "network-online.target"
# ];
# wants = [
# "network.target"
# "network-online.target"
# ];
# wantedBy = [ "multi-user.target" ];
# serviceConfig = {
# ExecStart = "${pkgs.cloudflared}/bin/cloudflared tunnel --no-autoupdate --config=${inputs.zeroq.dirs.server-credentials}/cloudflared/config.yaml --origincert=${inputs.zeroq.dirs.server-credentials}/cloudflared/cert.pem --credentials-file=${inputs.zeroq.dirs.server-credentials}/cloudflared/server.json run";
# Group = "root";
# User = "root";
# Restart = "on-failure";
# };
# };
environment = {
systemPackages = with pkgs; [
cloudflared
];
};
}
modules/vds/netbird.nix
-42
View File
@@ -1,42 +0,0 @@
{ inputs, ... }@flakeContext:
{
config,
lib,
pkgs,
...
}:
{
services.netbird.server = {
enable = false;
enableNginx = true;
domain = "netbird.zeroq.ru";
dashboard = {
enable = false;
domain = "netbird.zeroq.ru";
settings = {
#AUTH_AUTHORITY = "nbp_ufe0v5mbb5H1lQWL8eJfuzJ5ItPmlM46Mik0";
};
};
management = {
enable = false;
domain = "netbird.zeroq.ru";
};
};
# networking.firewall = {
# allowedTCPPorts = [
# 80
# 443
# 33073
# 10000
# 33080
# ];
# allowedUDPPorts = [ 3478 ];
# allowedUDPPortRanges = [
# {
# from = 49152;
# to = 65535;
# }
# ];
# };
}
modules/vds/nginx.nix
-54
View File
@@ -1,54 +0,0 @@
{ inputs, ... }@flakeContext:
{
config,
lib,
pkgs,
...
}:
{
services = {
nginx = {
enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts = {
"immich.zeroq.ru" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://sapphira.laxta-platy.ts.net:2283"; # Порт Immich
proxyWebsockets = true; # Если Immich использует WebSockets
};
};
# "nextcloud.zeroq.ru" = {
# forceSSL = true;
# enableACME = true;
# locations."/" = {
# proxyPass = "http://sapphira.laxta-platy.ts.net:10000"; # Порт Nextcloud
# proxyWebsockets = true;
# };
# };
"llm.zeroq.ru" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://atoridu.laxta-platy.ts.net:11111"; # Порт Open WebUI
proxyWebsockets = true;
};
};
};
};
};
security.acme = {
acceptTerms = true;
defaults.email = "oqyude@gmail.com";
};
networking.firewall.allowedTCPPorts = [
#44443
#44444
80
443
];
}
modules/vds/xray.nix
-21
View File
@@ -1,21 +0,0 @@
{ inputs, ... }@flakeContext:
{
config,
lib,
pkgs,
...
}:
{
services.xray = {
enable = true;
settings = inputs.zeroq-credentials.services.xray;
};
networking.firewall = {
allowedTCPPorts = [ 443 ];
allowedUDPPorts = [ 443 ]; # 41641
#trustedInterfaces = [ "tailscale0" ];
};
environment.systemPackages = with pkgs; [ xray ];
}