provision/hosts/torus/configuration.nix

@@ -5,6 +5,7 @@
     ./wireguard-server.nix
     ./samba-server.nix
     ./syncthing.nix
+    ./obsidian-vault.nix
     ./share.nix
     ./rss.nix
     ./home-assistant
@@ -125,6 +126,13 @@
       "git.tstarr.us" = (SSL // {
         locations."/".proxyPass = "http://localhost:3001/"; 
       });
+      "vault.tstarr.us" = (SSL // {
+        locations."/".proxyPass = "http://localhost:5000/"; 
+        extraConfig = ''
+          auth_pam  "Password Required";
+          auth_pam_service_name "nginx";        
+        '';
+      });
       "share.tstarr.us" = (SSL // {
         locations."/".proxyPass = "http://localhost:5001/"; 
         extraConfig = ''

provision/hosts/torus/obsidian-vault.nix

@@ -0,0 +1,20 @@
+{ config, lib, pkgs, user, ... }:
+{
+  networking.firewall.allowedTCPPorts = [ 5000 ];
+  networking.firewall.allowedUDPPorts = [ 5000 ];
+
+  environment.systemPackages = with pkgs; [ dufs ];
+
+  systemd.services.obsidian-vault = {
+    description = "Start dufs containing obsidian vault (vulcan)";
+    wantedBy = [ "default.target" ];
+    
+    restartIfChanged = true;
+    
+    serviceConfig = {
+      Type = "simple";
+      Restart = "always";
+      ExecStart = "${pkgs.dufs}/bin/dufs -p 5000 -A /engi/apps/dufs/vault";
+    };
+  };
+}

provision/modules/desktop/browser.nix

@@ -70,6 +70,7 @@ in {
           { "name" = "Homelab"; "children" = [
             { "url" = "http://localhost:8384"; name = "Syncthing"; }
             { "url" = "https://github.com/starr-dusT/dotfiles"; name = "Dotfiles"; }
+            { "url" = "https://vault.tstarr.us"; name = "Vault (dufs)"; }
             { "url" = "https://rssbridge.tstarr.us"; name = "RSSBridge"; }
           ]; }
           { "name" = "Nix"; "children" = [

provision/modules/devel/python.nix

@@ -17,8 +17,8 @@ in {
 
     environment.systemPackages = with pkgs; [ 
       (python3.withPackages my-python-packages)
-      fava 
       beancount 
+      fava 
       nodePackages_latest.pyright
     ];
   };