This commit is contained in:
Sandro - 2023-01-06 23:24:02 +01:00
parent 1a9a547bdd
commit d5e612c680
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5

View File

@ -1,27 +1,34 @@
{ config, ... }: { config, ... }:
{ {
c3d2.deployment.server = "server10"; c3d2 = {
deployment.server = "server10";
hq.statistics.enable = true;
};
microvm = { microvm = {
mem = 2 * 1024; mem = 1024;
vcpu = 8; vcpu = 8;
}; };
system.stateVersion = "22.11";
networking.hostName = "buzzrelay";
c3d2.hq.statistics.enable = true;
sops.defaultSopsFile = ./secrets.yaml; networking.hostName = "buzzrelay";
sops.secrets = {
sops = {
defaultSopsFile = ./secrets.yaml;
secrets = {
"buzzrelay/privKey".owner = config.services.buzzrelay.user; "buzzrelay/privKey".owner = config.services.buzzrelay.user;
"buzzrelay/pubKey".owner = config.services.buzzrelay.user; "buzzrelay/pubKey".owner = config.services.buzzrelay.user;
}; };
services.buzzrelay = { };
services = {
buzzrelay = {
enable = true; enable = true;
hostName = "relay.fedi.buzz"; hostName = "relay.fedi.buzz";
privKeyFile = config.sops.secrets."buzzrelay/privKey".path; privKeyFile = config.sops.secrets."buzzrelay/privKey".path;
pubKeyFile = config.sops.secrets."buzzrelay/pubKey".path; pubKeyFile = config.sops.secrets."buzzrelay/pubKey".path;
}; };
services.postgresql.settings.log_min_duration_statement = 50;
services.nginx = { nginx = {
enable = true; enable = true;
virtualHosts."relay.fedi.buzz" = { virtualHosts."relay.fedi.buzz" = {
forceSSL = true; forceSSL = true;
@ -29,4 +36,9 @@
locations."/".proxyPass = "http://127.0.0.1:${toString config.services.buzzrelay.listenPort}/"; locations."/".proxyPass = "http://127.0.0.1:${toString config.services.buzzrelay.listenPort}/";
}; };
}; };
postgresql.settings.log_min_duration_statement = 50;
};
system.stateVersion = "22.11";
} }