local dns test and chrony added

configurations/server.nix

@@ -113,9 +113,10 @@ let
         hostName = "${xlib.device.hostname}";
         networkmanager.enable = true;
         firewall.enable = false;
-        # nameservers = [
+        nameservers = [
-        #   "127.0.0.1"
+          "127.0.0.1"
-        # ];
+          "192.168.1.1"
+        ];
       };
 
       system = {

modules/server/bentopdf.nix

@@ -9,7 +9,7 @@
 {
   services.bentopdf = {
     enable = true;
-    domain = "pdf.home.arpa";
+    domain = "pdf.private";
     nginx = {
       enable = true;
       # virtualHost = {

modules/server/chrony.nix

@@ -0,0 +1,10 @@
+{
+  config,
+  pkgs,
+  ...
+}:
+{
+  services.chrony = {
+    enable = true;
+  };
+}

modules/server/coredns.nix

@@ -10,10 +10,28 @@
       zeroq.su:53 {
           hosts {
               109.248.161.5 x.zeroq.su
+              192.168.1.20 calibre.zeroq.su
+              192.168.1.20 dns.zeroq.su
+              192.168.1.20 flux.zeroq.su
+              192.168.1.20 git.zeroq.su
+              192.168.1.20 immich.zeroq.su
+              192.168.1.20 kuma.zeroq.su
+              192.168.1.20 nextcloud.zeroq.su
+              192.168.1.20 office.zeroq.su
+              192.168.1.20 pdf.zeroq.su
+              fallthrough
+          }
+          cache 300
+          log
+      }
+      home.arpa:53 {
+          hosts {
+              192.168.1.20 ca.home.arpa
               192.168.1.20 calibre.home.arpa
               192.168.1.20 dns.home.arpa
               192.168.1.20 flux.home.arpa
               192.168.1.20 git.home.arpa
+              192.168.1.20 home.arpa
               192.168.1.20 immich.home.arpa
               192.168.1.20 kuma.home.arpa
               192.168.1.20 nextcloud.home.arpa

modules/server/default.nix

@@ -7,6 +7,7 @@
     ../software/beets
     ./bentopdf.nix
     ./calibre-web.nix
+    ./chrony.nix
     ./coredns.nix
     ./gitea.nix
     ./glances.nix

modules/server/nginx.nix

@@ -29,13 +29,17 @@ in
               addr = "192.168.1.20";
               port = 10000;
             }
+            {
+              addr = "127.0.0.1";
+              port = 10000;
+            }
           ];
         };
         "office.home.arpa" = {
           forceSSL = true;
           enableACME = true;
         };
-        "pdf.home.arpa" = {
+        "pdf.private" = {
           forceSSL = false;
           enableACME = false;
           listen = [
@@ -51,21 +55,38 @@ in
               addr = "192.168.1.20";
               port = 8446;
             }
+            {
+              addr = "127.0.0.1";
+              port = 10000;
+            }
           ];
           extraConfig = ''
             client_max_body_size 5G;
           '';
         };
+        "pdf.home.arpa" = {
+          forceSSL = true;
+          enableACME = true;
+          locations = {
+            "/" = {
+              proxyPass = "http://127.0.0.1:8446";
+              proxyWebsockets = true;
+            };
+          };
+          extraConfig = ''
+            client_max_body_size 5G;
+          '';
+        };
         "nextcloud.home.arpa" = {
           forceSSL = true;
           enableACME = true;
           locations = {
             "/" = {
-              proxyPass = "http://${server}:10000";
+              proxyPass = "http://127.0.0.1:10000";
               proxyWebsockets = true;
             };
             "/whiteboard" = {
-              proxyPass = "http://${server}:3002";
+              proxyPass = "http://127.0.0.1:3002";
               proxyWebsockets = true;
             };
           };
@@ -74,10 +95,10 @@ in
           '';
         };
         "ca.home.arpa" = {
-          forceSSL = false;
+          forceSSL = true;
-          enableACME = false;
+          enableACME = true;
           locations."/" = {
-            proxyPass = "http://${server}:9000";
+            proxyPass = "http://127.0.0.1:9000";
             proxyWebsockets = true;
           };
           extraConfig = ''
@@ -88,7 +109,18 @@ in
           forceSSL = true;
           enableACME = true;
           locations."/" = {
-            proxyPass = "http://${server}:3000";
+            proxyPass = "http://127.0.0.1:3000";
+            proxyWebsockets = true;
+          };
+          extraConfig = ''
+            client_max_body_size 5G;
+          '';
+        };
+        "git.zeroq.su" = {
+          forceSSL = true;
+          enableACME = true;
+          locations."/" = {
+            proxyPass = "http://127.0.0.1:3000";
             proxyWebsockets = true;
           };
           extraConfig = ''
@@ -110,7 +142,7 @@ in
           forceSSL = true;
           enableACME = true;
           locations."/" = {
-            proxyPass = "http://${server}:4001";
+            proxyPass = "http://127.0.0.1:4001";
             proxyWebsockets = true;
           };
         };
@@ -118,7 +150,7 @@ in
           addSSL = true;
           enableACME = true;
           locations."/" = {
-            proxyPass = "http://${server}:6061";
+            proxyPass = "http://127.0.0.1:6061";
             proxyWebsockets = true;
           };
         };
@@ -126,7 +158,7 @@ in
           addSSL = true;
           enableACME = true;
           locations."/" = {
-            proxyPass = "http://${server}:2283";
+            proxyPass = "http://127.0.0.1:2283";
             proxyWebsockets = true;
           };
           extraConfig = ''
@@ -137,35 +169,49 @@ in
           forceSSL = true;
           enableACME = true;
           locations."/" = {
-            proxyPass = "http://${server}:8083";
+            proxyPass = "http://127.0.0.1:8083";
             proxyWebsockets = true;
           };
           extraConfig = ''
             client_max_body_size 5G;
           '';
         };
-        # "zeroq.home.arpa" = {
+        "dns.home.arpa" = {
-        #   forceSSL = false;
+          forceSSL = true;
-        #   enableACME = false;
+          enableACME = true;
-        #   root = pkgs.writeTextDir "index.html" ''
+          locations."/" = {
-        #     <!doctype html>
+            proxyPass = "http://127.0.0.1:53";
-        #     <html>
+          };
-        #     <body>
+          extraConfig = ''
-        #       <pre>This server is running in backend.</pre>
+            client_max_body_size 5G;
-        #     </body>
+          '';
-        #     </html>
+        };
-        #   '';
+        "zeroq.home.arpa" = {
-        #   listen = [
+          forceSSL = true;
-        #     {
+          enableACME = true;
-        #       addr = "100.64.0.0";
+          root = pkgs.writeTextDir "index.html" ''
-        #       port = 80;
+            <!doctype html>
-        #     }
+            <html>
-        #     {
+            <body>
-        #       addr = "192.168.1.20";
+              <pre>This server is running in backend.</pre>
-        #       port = 80;
+            </body>
-        #     }
+            </html>
-        #   ];
+          '';
-        # };
+          listen = [
+            {
+              addr = "100.64.0.0";
+              port = 80;
+            }
+            {
+              addr = "192.168.1.20";
+              port = 80;
+            }
+            {
+              addr = "127.0.0.1";
+              port = 80;
+            }
+          ];
+        };
       };
     };
   };

modules/server/samba.nix

@@ -7,7 +7,7 @@
   services.samba = {
     enable = true;
     nmbd = {
-      enable = false;
+      enable = true;
     };
     settings = {
       global = {

modules/server/step-ca.nix

@@ -31,6 +31,10 @@ in
         dataSource = "${varDir}/db";
       };
       authority = {
+        claims = {
+          defaultTLSCertDuration = "2160h";
+          maxTLSCertDuration = "2160h";
+        };
         provisioners = [
           {
             type = "ACME";