Merge branch 'master' of github.com:starr-dusT/dotfiles

provision/flake.nix

@@ -19,7 +19,6 @@
       system = "x86_64-linux";
       pkgs = import nixpkgs {
         inherit system;
-        config.allowUnfree = true;
       };
       lib = nixpkgs.lib;
       user = "tstarr";

provision/hosts/bulwark/configuration.nix

@@ -19,6 +19,7 @@
 
   # Add non-free packages
   nixpkgs.config.allowUnfree = true;
+  nixpkgs.config.permittedInsecurePackages = [ "electron-25.9.0" "openssl-1.1.1w" ];
   nixpkgs.overlays = import ../../lib/overlays.nix;
 
   # Hardware options

provision/hosts/kestrel/configuration.nix

@@ -18,6 +18,7 @@
 
   # Add non-free packages
   nixpkgs.config.allowUnfree = true;
+  nixpkgs.config.permittedInsecurePackages = [ "electron-25.9.0" "openssl-1.1.1w" ];
   nixpkgs.overlays = import ../../lib/overlays.nix;
 
   # Use zen kernel

provision/hosts/torus/configuration.nix

@@ -9,6 +9,7 @@
     ./share.nix
     ./rss.nix
     ./home-assistant
+    ./gitea.nix
   ];
 
   nix = {
@@ -25,6 +26,7 @@
 
   # Add non-free packages
   nixpkgs.config.allowUnfree = true;
+  nixpkgs.config.permittedInsecurePackages = [ "openssl-1.1.1w" ];
   nixpkgs.overlays = import ../../lib/overlays.nix;
 
   # Use normal kernel
@@ -121,6 +123,9 @@
       "media.tstarr.us" = (SSL // {
         locations."/".proxyPass = "http://localhost:8096/"; 
       });
+      "git.tstarr.us" = (SSL // {
+        locations."/".proxyPass = "http://localhost:3001/"; 
+      });
       "vault.tstarr.us" = (SSL // {
         locations."/".proxyPass = "http://localhost:5000/"; 
         extraConfig = ''

provision/hosts/torus/gitea.nix

@@ -0,0 +1,22 @@
+{ config, lib, pkgs, user, ... }:
+{
+  services.gitea = {
+    enable = true;
+    lfs.enable = true;
+    dump = {
+      enable = true;
+      interval = "23:05";
+    };
+    settings.service = {
+        DISABLE_REGISTRATION = true;
+    };
+    settings.server = {
+      DOMAIN = "git.tstarr.us";
+      HTTP_PORT = 3001;
+      ROOT_URL = "https://git.tstarr.us";
+    };
+    #settings.actions = {
+    #  ENABLED = true;
+    #};
+  };
+}

provision/modules/desktop/browser.nix

@@ -52,6 +52,7 @@ in {
           { "toplevel_name" = "Bookmarks"; }
           { "name" = "Daily"; "children" = [
             { "url" = "https://rss.tstarr.us"; name = "Miniflux"; }
+            { "url" = "https://git.tstarr.us"; name = "Gitea"; }
             { "url" = "https://media.tstarr.us/web/index.html#!/home.html"; name = "Jellyfin"; }
             { "url" = "https://home.tstarr.us"; name = "Home Assistant"; }
             { "url" = "https://share.tstarr.us"; name = "Share (dufs)"; }

provision/modules/devel/notes.nix

@@ -5,9 +5,6 @@ let
 in {
   options.modules.devel.notes.enable = lib.mkEnableOption "notes";
   config = lib.mkIf cfg.enable {
-    nixpkgs.config.permittedInsecurePackages = [
-        "electron-25.9.0"
-    ];
     environment.systemPackages = with pkgs; [
       pandoc
       gollum