This commit is contained in:
Sandro - 2023-01-06 23:24:02 +01:00
parent 1a9a547bdd
commit d5e612c680
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
1 changed files with 35 additions and 23 deletions

View File

@ -1,32 +1,44 @@
{ config, ... }:
{
c3d2.deployment.server = "server10";
c3d2 = {
deployment.server = "server10";
hq.statistics.enable = true;
};
microvm = {
mem = 2 * 1024;
mem = 1024;
vcpu = 8;
};
system.stateVersion = "22.11";
networking.hostName = "buzzrelay";
c3d2.hq.statistics.enable = true;
sops.defaultSopsFile = ./secrets.yaml;
sops.secrets = {
"buzzrelay/privKey".owner = config.services.buzzrelay.user;
"buzzrelay/pubKey".owner = config.services.buzzrelay.user;
};
services.buzzrelay = {
enable = true;
hostName = "relay.fedi.buzz";
privKeyFile = config.sops.secrets."buzzrelay/privKey".path;
pubKeyFile = config.sops.secrets."buzzrelay/pubKey".path;
};
services.postgresql.settings.log_min_duration_statement = 50;
services.nginx = {
enable = true;
virtualHosts."relay.fedi.buzz" = {
forceSSL = true;
enableACME = true;
locations."/".proxyPass = "http://127.0.0.1:${toString config.services.buzzrelay.listenPort}/";
networking.hostName = "buzzrelay";
sops = {
defaultSopsFile = ./secrets.yaml;
secrets = {
"buzzrelay/privKey".owner = config.services.buzzrelay.user;
"buzzrelay/pubKey".owner = config.services.buzzrelay.user;
};
};
services = {
buzzrelay = {
enable = true;
hostName = "relay.fedi.buzz";
privKeyFile = config.sops.secrets."buzzrelay/privKey".path;
pubKeyFile = config.sops.secrets."buzzrelay/pubKey".path;
};
nginx = {
enable = true;
virtualHosts."relay.fedi.buzz" = {
forceSSL = true;
enableACME = true;
locations."/".proxyPass = "http://127.0.0.1:${toString config.services.buzzrelay.listenPort}/";
};
};
postgresql.settings.log_min_duration_statement = 50;
};
system.stateVersion = "22.11";
}