removed unused files
loooph
parent
b1d1abb614
commit
005688c212
|
|
@ -8,18 +8,13 @@
|
|||
imports =
|
||||
[ # Include the results of the hardware scan.
|
||||
./hardware-configuration.nix
|
||||
#./nextcloud.nix
|
||||
./matrix-synapse.nix
|
||||
./nginx.nix
|
||||
./openldap.nix
|
||||
#./syncthing.nix
|
||||
./fail2ban.nix
|
||||
./git.nix
|
||||
#./jitsi.nix
|
||||
./postgres.nix
|
||||
./sd.nix
|
||||
#./mail.nix
|
||||
#./ldap-posix.nix
|
||||
];
|
||||
|
||||
# Boot
|
||||
|
|
|
|||
18
jitsi.nix
18
jitsi.nix
|
|
@ -1,18 +0,0 @@
|
|||
{config, pkgs, ...}:
|
||||
|
||||
let fqdn = "treffen.bib3.de"; in
|
||||
{
|
||||
services.jitsi-meet = {
|
||||
enable = true;
|
||||
hostName = "${fqdn}";
|
||||
interfaceConfig = {
|
||||
SHOW_JITSI_WATERMARK = false;
|
||||
SHOW_WATERMARK_FOR_GUESTS = false;
|
||||
};
|
||||
};
|
||||
|
||||
services.nginx.virtualHosts.${fqdn} = {
|
||||
enableACME = true;
|
||||
forceSSL = true;
|
||||
};
|
||||
}
|
||||
|
|
@ -1,15 +0,0 @@
|
|||
{ config, pkgs, ... }:
|
||||
|
||||
{
|
||||
users.ldap = {
|
||||
base = "ou=users,o=bib3,c=DE";
|
||||
useTLS = true;
|
||||
daemon.enable = true;
|
||||
enable = true;
|
||||
server = "ldap://127.0.0.1";
|
||||
loginPam = true;
|
||||
timeLimit = 10;
|
||||
};
|
||||
security.pam.services.sshd.makeHomeDir = true;
|
||||
|
||||
}
|
||||
57
mail.nix
57
mail.nix
|
|
@ -1,57 +0,0 @@
|
|||
{ config, pkgs, ... }:
|
||||
{
|
||||
imports = [
|
||||
(builtins.fetchTarball {
|
||||
url = "https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/archive/nixos-20.03/nixos-mailserver-nixos-20.09.tar.gz";
|
||||
sha256 = "02k25bh4pg31cx40ri4ynjw65ahy0mmj794hi5i1yn48j56vdbkj";
|
||||
})
|
||||
];
|
||||
mailserver = {
|
||||
enable = true;
|
||||
fqdn = "bib3.de";
|
||||
domains = [ "bib3.de" ];
|
||||
certificateScheme = 3;
|
||||
enableImap = true;
|
||||
enablePop3 = true;
|
||||
enableImapSsl = true;
|
||||
enablePop3Ssl = true;
|
||||
|
||||
#enableManageSieve = true;
|
||||
|
||||
loginAccounts = {
|
||||
"webmaster@bib3.de" = {
|
||||
hashedPassword = "$6$/gNzrl3XvdKYD.aF$0Amy4k4PgrhIuvzEP9yfbIvGhmNP/kQ1a.NlTHjd.01qt38/f02zFUkcI/Rb/tltW17rn8Q73.ckDJ.EvIoLb0";
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
services.dovecot2.extraConfig = ''
|
||||
auth_debug = yes
|
||||
userdb {
|
||||
args = /etc/dovecot/dovecot-ldap.conf.ext
|
||||
driver = ldap
|
||||
}
|
||||
passdb {
|
||||
args = /etc/dovecot/dovecot-ldap.conf.ext
|
||||
driver = ldap
|
||||
}
|
||||
'';
|
||||
|
||||
environment.etc."dovecot/dovecot-ldap.conf.ext" = {
|
||||
mode = "0600";
|
||||
text = ''
|
||||
hosts = 127.0.0.1
|
||||
ldap_version = 3
|
||||
tls = yes
|
||||
base = ou=users,o=bib3,c=DE
|
||||
user_attrs = =home=/home/bib3/%{ldap:cn},cn=uid,o=gid
|
||||
user_filter = (&(objectClass=InetOrgPerson)(cn=%n))
|
||||
pass_attrs = cn=user,userPassword=password
|
||||
pass_filter = (&(objectClass=InetOrgPerson)(cn=%n))
|
||||
default_pass_scheme = SHA512
|
||||
'';
|
||||
uid = config.ids.uids.dovecot2;
|
||||
gid = config.ids.gids.dovecot2;
|
||||
};
|
||||
}
|
||||
|
||||
|
|
@ -1,17 +0,0 @@
|
|||
{lib, pkgs, config,...}:
|
||||
|
||||
with lib;
|
||||
let
|
||||
cfg = config.services.mediagoblin;
|
||||
in {
|
||||
options.services.mediagoblin = {
|
||||
enable = mkEnableOption "mediagoblin service";
|
||||
};
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
systemd.services.mediagoblin = {
|
||||
wantedBy = [ "networking.target" ];
|
||||
serviceConfig.ExecStart = "${pkgs.mediagoblin}/bin/mediagoblin";
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
@ -1,7 +0,0 @@
|
|||
let host = "bib3.de"; in
|
||||
{
|
||||
services.murmur = {
|
||||
enable = true;
|
||||
hostname = "$host";
|
||||
};
|
||||
}
|
||||
|
|
@ -1,51 +0,0 @@
|
|||
{config, pkgs, ...}:
|
||||
let
|
||||
fqdn = "nextcloud.bib3.de";
|
||||
in {
|
||||
services.nginx = {
|
||||
enable = true;
|
||||
|
||||
recommendedGzipSettings = true;
|
||||
recommendedOptimisation = true;
|
||||
recommendedProxySettings = true;
|
||||
recommendedTlsSettings = true;
|
||||
|
||||
sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
|
||||
|
||||
virtualHosts.${fqdn} = {
|
||||
forceSSL = true;
|
||||
enableACME = true;
|
||||
};
|
||||
};
|
||||
|
||||
services.nextcloud = {
|
||||
enable = true;
|
||||
hostName = fqdn;
|
||||
nginx.enable = true;
|
||||
config = {
|
||||
dbtype = "pgsql";
|
||||
dbuser = "nextcloud";
|
||||
dbhost = "/run/postgresql";
|
||||
dbname = "nextcloud";
|
||||
adminpassFile = "/var/lib/nextcloud/config/adminpass";
|
||||
adminuser = "root";
|
||||
};
|
||||
};
|
||||
|
||||
systemd.services."nextcloud-setup" = {
|
||||
requires = [ "postgresql.service" ];
|
||||
after = [ "postgresql.service" ];
|
||||
};
|
||||
|
||||
services.postgresql = {
|
||||
enable = true;
|
||||
ensureDatabases = [ "nextcloud" ];
|
||||
ensureUsers = [
|
||||
{
|
||||
name = "nextcloud";
|
||||
ensurePermissions."DATABASE nextcloud" = "ALL PRIVILEGES";
|
||||
}
|
||||
];
|
||||
};
|
||||
|
||||
}
|
||||
|
|
@ -1,40 +0,0 @@
|
|||
#{ lib, stdenv, fetchurl, ... }:
|
||||
|
||||
with import <nixpkgs> {};
|
||||
|
||||
stdenv.mkDerivation rec {
|
||||
pname = "mediagoblin";
|
||||
version = "0.11.0";
|
||||
|
||||
src = fetchurl {
|
||||
url = "https://git.savannah.gnu.org/cgit/${pname}.git/snapshot/${pname}-${version}.tar.gz";
|
||||
sha256 = "1izvnd6x8bmvw36cjpfgmgh7f2gnbf7mni3s29svdjp0ww4szzxn";
|
||||
};
|
||||
|
||||
doCheck = true;
|
||||
|
||||
nativeBuildInputs = [
|
||||
autoconf
|
||||
m4
|
||||
nodejs
|
||||
python3
|
||||
python3Packages.certifi
|
||||
python3Packages.lxml
|
||||
python3Packages.pillow
|
||||
python3Packages.virtualenv
|
||||
];
|
||||
|
||||
buildInputs = [
|
||||
sqlite
|
||||
|
||||
];
|
||||
|
||||
meta = with lib; {
|
||||
description = "media publishing platform that anyone can run";
|
||||
longDescription = ''
|
||||
MediaGoblin is a free software media publishing platform that anyone can run. You can think of it as a decentralized alternative to Flickr, YouTube, SoundCloud, etc.
|
||||
'';
|
||||
homepage = "https://mediagoblin.org/";
|
||||
license = licenses.gpl3Plus;
|
||||
};
|
||||
}
|
||||
|
|
@ -1,7 +0,0 @@
|
|||
{ config, pkgs, ...}:
|
||||
|
||||
{
|
||||
services.syncthing = {
|
||||
enable = true;
|
||||
};
|
||||
}
|
||||
Loading…
Reference in New Issue