Superredstone/nixos
1
0
Fork 0
mirror of https://github.com/Superredstone/nixos.git synced 2026-08-19 11:48:57 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

Compare commits

base: Superredstone/nixos:5a0da9e0c4fa68017ff9ff3a8f869472a1ed9f49
Branches Tags
Superredstone/nixos:main Superredstone/nixos:mail
...
compare: Superredstone/nixos:main
Branches Tags
Superredstone/nixos:main Superredstone/nixos:mail
13 Commits
5a0da9e0c4 ... main
Author SHA1 Message Date
Superredstone ee8632dc2f feat(package): remove useless packages 2026-08-17 18:14:11 +02:00
Superredstone b6f48e8fa6 feat(package): remove docker 2026-08-17 18:10:39 +02:00
Superredstone c05e660546 feat(home): enable some configs only on gui systems 2026-08-17 18:10:23 +02:00
Superredstone bf9f97c804 feat(mail): add authentik mail 2026-08-17 17:33:19 +02:00
Patrick Canal c074dd9be5 chore: merge mail into main 
feat(bomba): add mail
 2026-08-16 18:30:17 +02:00
Superredstone f8d5ed50cd feat(bomba): add mail 2026-08-16 18:23:17 +02:00
Superredstone c1b118afde flake.lock: update 2026-08-14 16:37:45 +02:00
Superredstone cd59348288 feat(package): add pre-commit 2026-08-14 16:12:22 +02:00
Superredstone af48bc4243 flake.lock: update 2026-08-11 07:07:58 +02:00
Superredstone c472ab6548 feat(package): add devenv 2026-08-03 09:19:39 +02:00
Superredstone 4c884aee53 feat(noctalia): update settings 2026-08-03 09:19:39 +02:00
Superredstone 3d94b88b8e feat(jellyfin): add sso button to login page 2026-08-02 12:46:21 +02:00
Superredstone f075d45940 feat(qbittorrent): replaced webui login with authentik 2026-08-01 12:01:44 +02:00
13 changed files with 310 additions and 80 deletions
Expand all files Collapse all files
assets/noctalia-config.toml
+87 -12
View File
@@ -1,4 +1,8 @@
[accessibility]
ui_scale = 0.90000000596046448
[bar.default]
capsule_radius = 0
center = [ "clock" ]
end = [
"media",
@@ -26,21 +30,90 @@ enabled = true
[desktop_widgets]
schema_version = 1
widget_order = []
widget_order = [
"desktop-widget-0000000000000001",
"desktop-widget-0000000000000002",
"desktop-widget-0000000000000003",
"desktop-widget-0000000000000005"
]
[desktop_widgets.grid]
cell_size = 16
major_interval = 4
visible = true
[desktop_widgets.widget]
[desktop_widgets.widget.desktop-widget-0000000000000001]
box_height = 0.0
box_width = 0.0
cx = 1762.0
cy = 133.70001220703125
output = "HDMI-A-1"
rotation = 0.0
type = "clock"
[desktop_widgets.widget.desktop-widget-0000000000000001.settings]
background_opacity = 0.0
background_padding = 11
background_radius = 0
center_text = false
clock_style = "digital"
shadow = false
[desktop_widgets.widget.desktop-widget-0000000000000002]
box_height = 0.0
box_width = 0.0
cx = 1114.0
cy = 995.4000244140625
output = "HDMI-A-1"
rotation = 0.0
type = "sysmon"
[desktop_widgets.widget.desktop-widget-0000000000000002.settings]
background_opacity = 0.0
display = "graph"
shadow = false
stat = "cpu_usage"
stat2 = "cpu_temp"
[desktop_widgets.widget.desktop-widget-0000000000000003]
box_height = 0.0
box_width = 0.0
cx = 154.0
cy = 130.60000610351562
output = "HDMI-A-1"
rotation = 0.0
type = "weather"
[desktop_widgets.widget.desktop-widget-0000000000000003.settings]
background_opacity = 0.0
background_padding = 19
background_radius = 0
shadow = false
[desktop_widgets.widget.desktop-widget-0000000000000005]
box_height = 0.0
box_width = 0.0
cx = 810.0
cy = 995.4000244140625
output = "HDMI-A-1"
rotation = 0.0
type = "sysmon"
[desktop_widgets.widget.desktop-widget-0000000000000005.settings]
background_opacity = 0.0
display = "graph"
shadow = false
show_label = true
stat = "ram_pct"
stat2 = "swap_pct"
[dock]
auto_hide = true
enabled = true
icon_size = 40
magnification_scale = 1.3500000052154064
icon_size = 42
magnification_scale = 1.3000000044703484
padding = 4
radius = 0
reserve_space = false
show_dots = true
@@ -74,7 +147,6 @@ widget_order = [ "lockscreen-login-box@winit", "lockscreen-login-box@HDMI-A-1",
show_caps_lock = true
show_keyboard_layout = true
show_login_button = true
show_password_hint = true
[lockscreen_widgets.widget."lockscreen-login-box@eDP-1"]
box_height = 70.0
@@ -90,7 +162,6 @@ widget_order = [ "lockscreen-login-box@winit", "lockscreen-login-box@HDMI-A-1",
show_caps_lock = true
show_keyboard_layout = true
show_login_button = true
show_password_hint = true
[lockscreen_widgets.widget."lockscreen-login-box@winit"]
box_height = 70.0
@@ -110,7 +181,6 @@ widget_order = [ "lockscreen-login-box@winit", "lockscreen-login-box@HDMI-A-1",
show_caps_lock = true
show_keyboard_layout = true
show_login_button = true
show_password_hint = true
[osd.kinds]
media = false
@@ -120,20 +190,25 @@ enabled = []
[shell]
avatar_path = "/home/r3ddy/.face"
font_family = "Noto Sans"
corner_radius_scale = 0.0
font_family = "Monocraft"
polkit_agent = true
settings_show_advanced = true
[shell.screen_corners]
size = 1
[theme]
builtin = "Catppuccin"
community_palette = "Tokyo Night Moon"
community_palette = "One Dark Two"
custom_palette = "Tokyo Night Moon"
mode = "dark"
source = "builtin"
wallpaper_scheme = "m3-content"
wallpaper_scheme = "dysfunctional"
[theme.templates]
builtin_ids = [ "gtk3", "gtk4", "kitty", "niri", "qt" ]
community_ids = [ "discord", "telegram" ]
builtin_ids = [ "btop", "gtk3", "gtk4", "kcolorscheme", "kitty", "niri", "qt" ]
community_ids = [ "discord", "telegram", "vscode", "heroiclauncher", "steam", "obs", "lazygit" ]
[wallpaper]
directory = "/home/r3ddy/Pictures/Wallpapers"
flake.lock
Generated
+146 -51
View File
@@ -16,11 +16,11 @@
"uv2nix": "uv2nix"
},
"locked": {
"lastModified": 1785518110,
"narHash": "sha256-xjYVeyu38koV1OwCYK/RY56EGprNcHAHBLh6/DDNtj0=",
"lastModified": 1786375669,
"narHash": "sha256-w4kG3Alh6akMNbrsNwpKa0Pe/WLgvxjIAPXh9KYibmM=",
"owner": "nix-community",
"repo": "authentik-nix",
"rev": "65952f8360754a8aa5507f8c345ed3d256212ccb",
"rev": "b7a42b503f0c7bf26a30ddb48de0bfaf43d6ead1",
"type": "github"
},
"original": {
@@ -46,6 +46,22 @@
"type": "github"
}
},
"blobs": {
"flake": false,
"locked": {
"lastModified": 1604995301,
"narHash": "sha256-wcLzgLec6SGJA8fx1OEN1yV/Py5b+U5iyYpksUY/yLw=",
"owner": "simple-nixos-mailserver",
"repo": "blobs",
"rev": "2cccdf1ca48316f2cfd1c9a0017e8de5a7156265",
"type": "gitlab"
},
"original": {
"owner": "simple-nixos-mailserver",
"repo": "blobs",
"type": "gitlab"
}
},
"client-ts-generator-src": {
"flake": false,
"locked": {
@@ -94,16 +110,32 @@
"type": "github"
}
},
"flake-compat_3": {
"flake": false,
"locked": {
"lastModified": 1767039857,
"narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
"owner": "NixOS",
"repo": "flake-compat",
"rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
"type": "github"
},
"original": {
"owner": "NixOS",
"repo": "flake-compat",
"type": "github"
}
},
"flake-parts": {
"inputs": {
"nixpkgs-lib": "nixpkgs-lib"
},
"locked": {
"lastModified": 1782949081,
"narHash": "sha256-vp6Y/Grm98ESt6ceOkWiHWyZRDV3J1RID4w+6NWK9yA=",
"lastModified": 1785627969,
"narHash": "sha256-4dtXQk/NMePegK/nWp5NSeuZKLATItOq61lpEvmXqGw=",
"owner": "hercules-ci",
"repo": "flake-parts",
"rev": "17c9d6cdfc60c64f4ee8d306f9bc0b4ccb51481e",
"rev": "427bf4bd9435fdf21321c8cc628c24efc14c0f7a",
"type": "github"
},
"original": {
@@ -117,11 +149,11 @@
"nixpkgs-lib": "nixpkgs-lib_2"
},
"locked": {
"lastModified": 1782949081,
"narHash": "sha256-vp6Y/Grm98ESt6ceOkWiHWyZRDV3J1RID4w+6NWK9yA=",
"lastModified": 1785627969,
"narHash": "sha256-4dtXQk/NMePegK/nWp5NSeuZKLATItOq61lpEvmXqGw=",
"owner": "hercules-ci",
"repo": "flake-parts",
"rev": "17c9d6cdfc60c64f4ee8d306f9bc0b4ccb51481e",
"rev": "427bf4bd9435fdf21321c8cc628c24efc14c0f7a",
"type": "github"
},
"original": {
@@ -191,6 +223,31 @@
"type": "github"
}
},
"git-hooks": {
"inputs": {
"flake-compat": [
"simple-mailserver",
"flake-compat"
],
"nixpkgs": [
"simple-mailserver",
"nixpkgs"
]
},
"locked": {
"lastModified": 1784288435,
"narHash": "sha256-ReRHaLgr/uVqdD8afFSn+myXIfpHeOhP0yYe0TJqAA8=",
"owner": "cachix",
"repo": "git-hooks.nix",
"rev": "43b3c1ab9d40fb1dbb008f451988a91e375825e9",
"type": "github"
},
"original": {
"owner": "cachix",
"repo": "git-hooks.nix",
"type": "github"
}
},
"home-manager": {
"inputs": {
"nixpkgs": [
@@ -198,11 +255,11 @@
]
},
"locked": {
"lastModified": 1785496534,
"narHash": "sha256-EASdusMYLuPhOCrE3LmsAGOvGhX3vnKBLxFvj9lI8tU=",
"lastModified": 1786656209,
"narHash": "sha256-ybGtuwGKTUCefKYsplzvw4xcCqznto0c7BaiQhgILtA=",
"owner": "nix-community",
"repo": "home-manager",
"rev": "e8827fbbb12015a8dd9f66285aec79d655bcb9f6",
"rev": "c554d3441f725537854e877519f01cbd60680174",
"type": "github"
},
"original": {
@@ -234,11 +291,11 @@
"nixpkgs": "nixpkgs"
},
"locked": {
"lastModified": 1785437982,
"narHash": "sha256-m0mLVZc4RmzlBMjPOFh+rnALT92jMXJqQtLBMP9jo90=",
"lastModified": 1785870829,
"narHash": "sha256-l+RTmz09TxwWJRLQuc+cKi3yY0K4PSz8tRPTbBUvaVo=",
"owner": "xddxdd",
"repo": "nix-cachyos-kernel",
"rev": "8dfc5b3a553819ba50f601d804a3df64360bd5d8",
"rev": "879f45ee15a3b06fdbbf9b6dc825c5fbca137fcd",
"type": "github"
},
"original": {
@@ -258,11 +315,11 @@
"vpn-confinement": "vpn-confinement"
},
"locked": {
"lastModified": 1785279985,
"narHash": "sha256-cRg2saEF6EznYl3tHt9rHIR3fgaABXlNi2XNZx1Dc2k=",
"lastModified": 1786383226,
"narHash": "sha256-5cLjpODa1Valr3p00ReOnoiqQ3EKYjfsRZfpfcfdv0U=",
"owner": "kiriwalawren",
"repo": "nixflix",
"rev": "6b0ae3e3c0cd36a62832588ec3e6bd68e14949c0",
"rev": "e9c20f232d0e09e346578bf6f8a390c34952643e",
"type": "github"
},
"original": {
@@ -273,11 +330,11 @@
},
"nixpkgs": {
"locked": {
"lastModified": 1785382966,
"narHash": "sha256-TzNPxZZV/qnV8U5fEtrvcMF/GppHnlWm16RDHddPOyE=",
"lastModified": 1785859399,
"narHash": "sha256-pY4X50au95QrTpAbEm08pURmeU3/Ud2oa0s2XzpDdz8=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "ba889d5db7c07eaf5cb8f37835d447d935c51b21",
"rev": "85f62611fa3f3eacbcfe3bc7a6d6518b443ca442",
"type": "github"
},
"original": {
@@ -305,11 +362,11 @@
},
"nixpkgs-lib": {
"locked": {
"lastModified": 1782614948,
"narHash": "sha256-ePjCwr1sNm9NYUqywL7QfK3JnlS015msC+eBu2zKlp8=",
"lastModified": 1785031560,
"narHash": "sha256-OmshNvn2vupOFpYinLUu+1Dnpu4n7Q5N3ggGVNHpkUI=",
"owner": "nix-community",
"repo": "nixpkgs.lib",
"rev": "db3f255737b94216eb71cce308e2912cf6bc2d7c",
"rev": "0e79af5e3d4dcfcd676ab5ba3f95d2e3352e078c",
"type": "github"
},
"original": {
@@ -320,11 +377,11 @@
},
"nixpkgs-lib_2": {
"locked": {
"lastModified": 1782614948,
"narHash": "sha256-ePjCwr1sNm9NYUqywL7QfK3JnlS015msC+eBu2zKlp8=",
"lastModified": 1785031560,
"narHash": "sha256-OmshNvn2vupOFpYinLUu+1Dnpu4n7Q5N3ggGVNHpkUI=",
"owner": "nix-community",
"repo": "nixpkgs.lib",
"rev": "db3f255737b94216eb71cce308e2912cf6bc2d7c",
"rev": "0e79af5e3d4dcfcd676ab5ba3f95d2e3352e078c",
"type": "github"
},
"original": {
@@ -351,11 +408,11 @@
},
"nixpkgs_2": {
"locked": {
"lastModified": 1785454630,
"narHash": "sha256-LQy14TZp77TwbQf40gg1V3jo8FwJG0jGDkAH+zRHqg8=",
"lastModified": 1786599213,
"narHash": "sha256-yNJd40f11EzXBjSByCB7IPpeFFAdeoSKKM67dGkfFoU=",
"owner": "nixos",
"repo": "nixpkgs",
"rev": "1559d3daa3ecc813a650b79375ea61b6741b8746",
"rev": "0e251e24a4f24e036a084b6b4b2d2491af4167f4",
"type": "github"
},
"original": {
@@ -394,6 +451,22 @@
"type": "github"
}
},
"nixpkgs_5": {
"locked": {
"lastModified": 1786548149,
"narHash": "sha256-pBv1JbhCqqMcF5ciyLi8D9nzVyw4Gv2sk/tcGF4mBHA=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "5df1f9ae934fe1bffbd3867a1ae2870ab22302ed",
"type": "github"
},
"original": {
"owner": "NixOS",
"ref": "nixos-unstable-small",
"repo": "nixpkgs",
"type": "github"
}
},
"nixvim": {
"inputs": {
"flake-utils": "flake-utils_2",
@@ -441,11 +514,11 @@
]
},
"locked": {
"lastModified": 1785510559,
"narHash": "sha256-w3qBy6KVhIWMkgKcb5lr2hPGC1hRMDy3ppFOQfFrUOQ=",
"lastModified": 1786715539,
"narHash": "sha256-/v++z9CggpnX3g94bLckf4OUAYvOIMErfOzk+xP2lBE=",
"owner": "noctalia-dev",
"repo": "noctalia",
"rev": "35a4fcf6a69d68dd97cfde1694f1dd7d05bbcdfd",
"rev": "ab2cfdf6e7b93ff0dffb80fb4b406294de54430d",
"type": "github"
},
"original": {
@@ -470,11 +543,11 @@
]
},
"locked": {
"lastModified": 1785115949,
"narHash": "sha256-8AM37BfyGaL2v/SZyg4PupRxJ01Y4htvM+WrTjWrPpo=",
"lastModified": 1785730568,
"narHash": "sha256-NjSPsgjJ7MSpBtTkUcmNhRe6AFZ96+zsca2M8YuQi8Y=",
"owner": "pyproject-nix",
"repo": "build-system-pkgs",
"rev": "62c0d86027edb1c4f39a5facc09876348144f7c9",
"rev": "90fde00db3687922d39d95fc591475fd0bbbcd72",
"type": "github"
},
"original": {
@@ -491,11 +564,11 @@
]
},
"locked": {
"lastModified": 1784591072,
"narHash": "sha256-zP/WaDxrRu8GANZM61+V2LT/7ycEEdoyLWn7M6WzU7M=",
"lastModified": 1786031528,
"narHash": "sha256-cROiHKO3UbIKqF5FG5NikvydzlfIj4EcR1Cty9qOVt4=",
"owner": "pyproject-nix",
"repo": "pyproject.nix",
"rev": "e3b599ca2e7fcf93d4edf65d7f19bbf6491724f3",
"rev": "1b1485546d85f6f6c7aadb10c4923dbc09633263",
"type": "github"
},
"original": {
@@ -515,9 +588,31 @@
"nixpkgs-my-features": "nixpkgs-my-features",
"nixvim": "nixvim",
"noctalia": "noctalia",
"simple-mailserver": "simple-mailserver",
"sops-nix": "sops-nix"
}
},
"simple-mailserver": {
"inputs": {
"blobs": "blobs",
"flake-compat": "flake-compat_3",
"git-hooks": "git-hooks",
"nixpkgs": "nixpkgs_5"
},
"locked": {
"lastModified": 1786567397,
"narHash": "sha256-H713vbgy+n1asVNn/0kBwbFgroNgC1dnx8pEMKcFdgk=",
"owner": "simple-nixos-mailserver",
"repo": "nixos-mailserver",
"rev": "e668474df221aeef1ebd374d0364aa07f1d4f827",
"type": "gitlab"
},
"original": {
"owner": "simple-nixos-mailserver",
"repo": "nixos-mailserver",
"type": "gitlab"
}
},
"sops-nix": {
"inputs": {
"nixpkgs": [
@@ -525,11 +620,11 @@
]
},
"locked": {
"lastModified": 1783174389,
"narHash": "sha256-aCWC8ngycU7OdJrU2+Je3qf+1a2ykuBvpPhZT/9tXMc=",
"lastModified": 1786629091,
"narHash": "sha256-gkig4nPi1CWc4Z50GBsjE4ygSE7hMpl/TwID2an2Cck=",
"owner": "Mic92",
"repo": "sops-nix",
"rev": "f1406619a3884cd5c47992a70b8b35c9c0fcb4c9",
"rev": "a8627b21b9107c5711c96b84f32a9a4b3d45295f",
"type": "github"
},
"original": {
@@ -592,11 +687,11 @@
]
},
"locked": {
"lastModified": 1784369104,
"narHash": "sha256-47cxbcZODibHv3rELFQ9vZly0vUNkND/atn/U7HLeb0=",
"lastModified": 1785945821,
"narHash": "sha256-NLSyTCW4K4ofhNBllt3omPasm6QpralXH1DBZOc91Dw=",
"owner": "numtide",
"repo": "treefmt-nix",
"rev": "df3c0640565d04a0261253cdd89fce78ec50168a",
"rev": "ae7910970dddc408fe6ab1c8e4b277bb21d72dc0",
"type": "github"
},
"original": {
@@ -617,11 +712,11 @@
]
},
"locked": {
"lastModified": 1785147819,
"narHash": "sha256-udwe836AZe8BYU+YqVc51QLuOeWKoGEmPIMF0ImUfTQ=",
"lastModified": 1786026603,
"narHash": "sha256-payw8w/aqR/Vr7LvDp14jxa5egFrZN7g8INsPzn7rN0=",
"owner": "pyproject-nix",
"repo": "uv2nix",
"rev": "0983f54345137c2dd528ce2c28cb56c2cbdceb2a",
"rev": "0dfa8388dc855b1774f509725d8ea6806291571d",
"type": "github"
},
"original": {
@@ -632,11 +727,11 @@
},
"vpn-confinement": {
"locked": {
"lastModified": 1783793099,
"narHash": "sha256-10ZPBveBW3uzMvjQMFo318oXFrd5Vn7gIyRIAdIEo/8=",
"lastModified": 1785142579,
"narHash": "sha256-WEPxDMiKt3uGVVu/aorHnIgYYW62mEq2Q+rlN3qH6bg=",
"owner": "Maroka-chan",
"repo": "VPN-Confinement",
"rev": "f0570ae5dc54a13d881b46d2772369dd832d6021",
"rev": "b3aa71a7edfe6af748c23729d1bdec3b499741ff",
"type": "github"
},
"original": {
flake.nix
+4
View File
@@ -4,6 +4,7 @@
nixpkgs-25-11.url = "github:nixos/nixpkgs/nixos-25.11";
nixpkgs-my-features.url = "github:Superredstone/nixpkgs/my-features";
nix-cachyos-kernel.url = "github:xddxdd/nix-cachyos-kernel/release";
simple-mailserver.url = "gitlab:simple-nixos-mailserver/nixos-mailserver";
home-manager = {
url = "github:nix-community/home-manager";
inputs.nixpkgs.follows = "nixpkgs";
@@ -42,6 +43,7 @@
noctalia,
nixflix,
authentik-nix,
simple-mailserver,
...
}@inputs:
let
@@ -56,6 +58,7 @@
nixvim
sops-nix
noctalia
simple-mailserver
inputs
nixpkgs
nixpkgs-25-11
@@ -93,6 +96,7 @@
additionalModules = [
nixflix.nixosModules.default
authentik-nix.nixosModules.default
simple-mailserver.nixosModules.default
];
};
nixosConfigurations."frog" = mkSystem "frog" {
home/default.nix
+9 -2
View File
@@ -10,11 +10,18 @@
./fish.nix
./git.nix
./kitty.nix
./mangohud.nix
./tmux.nix
./vesktop.nix
./zoxide.nix
]
++ (
if currentSystemDe != "none" then
[
./mangohud.nix
./vesktop.nix
]
else
[ ]
)
++ (if currentSystemDe == "gnome" then [ ./gnome.nix ] else [ ])
++ (if currentSystemDe == "niri" then [ ./niri.nix ] else [ ]);
home/kitty.nix
+2 -2
View File
@@ -1,7 +1,7 @@
{ pkgs, currentSystemDe, ... }:
{ pkgs, ... }:
{
programs.kitty = {
enable = currentSystemDe != "none";
enable = true;
themeFile = "Catppuccin-Mocha";
extraConfig = " ";
enableGitIntegration = true;
lib/mksystem.nix
+2
View File
@@ -4,6 +4,7 @@
nixvim,
sops-nix,
noctalia,
simple-mailserver,
inputs,
nixpkgs,
nixpkgs-25-11,
@@ -32,6 +33,7 @@ let
workSystem
enableZram
nixvim
simple-mailserver
sops-nix
noctalia
inputs
machines/bomba/secrets.nix
+2 -1
View File
@@ -1,4 +1,4 @@
{... }:
{ ... }:
{
sops =
let
@@ -27,6 +27,7 @@
authentik_env = default;
vaultwarden_env = default;
vikunja_env = default;
mail_password = default;
};
};
}
machines/bomba/services/caddy.nix
+4
View File
@@ -22,6 +22,10 @@
root /var/www/patrickcanal.it/public
file_server
'';
"mail.patrickcanal.it".extraConfig = ''
root /var/www/patrickcanal.it/public
file_server
'';
"vaultwarden.patrickcanal.it".extraConfig = ''
encode zstd gzip
reverse_proxy :8003 {
machines/bomba/services/default.nix
+1
View File
@@ -8,6 +8,7 @@
./fail2ban.nix
./gitea.nix
./homebox.nix
./mail.nix
./navidrome.nix
./nextcloud.nix
./nixflix.nix
machines/bomba/services/mail.nix
+39
View File
@@ -0,0 +1,39 @@
{ config, ... }:
let
fqdn = "mail.patrickcanal.it";
in
{
security.acme = {
acceptTerms = true;
certs."mail.patrickcanal.it" = {
webroot = "/var/www/patrickcanal.it/public/";
};
};
mailserver = {
enable = true;
stateVersion = 5;
fqdn = fqdn;
domains = [ "patrickcanal.it" ];
# Reference the existing ACME configuration created by nginx
x509.useACMEHost = fqdn;
# A list of all login accounts. To create the password hashes, use
# nix-shell -p mkpasswd --run 'mkpasswd -s'
accounts = {
"me@patrickcanal.it" = {
hashedPassword = "$y$j9T$zEKbsELY3HcPZq9CH6bSe0$T9syGTl9haNhjS5SNjDbrY5uoN5z/LCYEmbFowFcAP/";
# Additional addresses delivered to this mailbox
aliases = [
"postmaster@patrickcanal.it"
"io@patrickcanal.it"
];
};
"auth@patrickcanal.it" = {
hashedPassword = "$y$j9T$JqqefR6flaaJBRjD4KVZc1$QM6h4Spr5.yn/FuIT.ydTV22daEbiVd8ZprV/POtPgB";
};
};
};
}
machines/bomba/services/nixflix.nix
+6
View File
@@ -39,6 +39,7 @@ in
MaxAuthenticationFailCount = 0;
Username = user;
Password_PBKDF2 = "@ByteArray(8AhaCcVLo4H07+dv5uF7pQ==:m+wRuZuzus0N5mkOGXePQmDZfgTpRZiv2OSKbk1pnOA/QPa/JF4Ai1FwVbyZ1PF9odSOSI1UaRQwDMb3MxOKMg==)";
LocalHostAuth = false; # Disable auth because authentik is setup
};
};
};
@@ -115,6 +116,11 @@ in
jellyfin = {
enable = true;
apiKey._secret = config.sops.secrets.jellyfin_api_key.path;
branding.loginDisclaimer = ''
<a href="/sso/OIDC/Start/authentik">
Sign in with Authentik
</a>
'';
network = {
knownProxies = [ "127.0.0.1" ];
internalHttpPort = jellyfinPort;
modules/packages.nix
+3 -8
View File
@@ -27,9 +27,9 @@
btop
bun
busybox
devenv
dig
distrobox
docker
dua
fd
file
@@ -51,6 +51,7 @@
openssl
openvpn
pinentry-tty
pre-commit
python3
ripgrep
rsync
@@ -73,16 +74,13 @@
guiPackages = lib.optionals (currentSystemDe != "none") [
android-studio
baobab
bazaar
brave
cinny-desktop
firefox
fladder
gapless
gimp
mpv
nautilus
nextcloud-client
obs-studio
qbittorrent
@@ -90,7 +88,6 @@
seahorse
telegram-desktop
thunderbird
tor-browser
vesktop
vlc
vulkan-tools
@@ -98,18 +95,15 @@
];
gamingPackages = lib.optionals gamingSystem [
arrpc
cura-appimage
heroic
obs-studio
openrgb
prismlauncher
satisfactorymodmanager
];
workPackages = lib.optionals workSystem [
ansible
virt-manager
];
plasmaPackages = lib.optionals (currentSystemDe == "plasma") [
@@ -128,6 +122,7 @@
niriPackages = lib.optionals (currentSystemDe == "niri") [
gnome-keyring
loupe
nautilus
papers
inputs.noctalia.packages.${hostSystem}.default
secrets/bomba.sops.yaml
+5 -4
View File
@@ -10,9 +10,10 @@ prowlarr_api_key: ENC[AES256_GCM,data:UDpnqIP64k8Qt9k/sjbESNostFiGHfLo3CEYfyWppH
seerr_api_key: ENC[AES256_GCM,data:KDQxxo2W4tz9UokscAUSz7pf7wY2AfsEQpZh2aXGjsQOBgSLt1DEe5LUxealBZju8gabhp4sNGFvp0+ioZpfkg==,iv:V/rbR6bZtVnDhLLVmygGyTf5Ujm8sb2xHy4JuvLiiV8=,tag:MxGzXHbZWgu3H+ICS2tSNQ==,type:str]
indexers_ilcorsaroblu_password: ENC[AES256_GCM,data:w3CIGQqLxHEkUHvscZc=,iv:fjsB3zt4Z43MKRECjpa7+gNDzM8D+JK0sbKt2P+Hdiw=,tag:KvLawon+KfrhGmi1TWRHLw==,type:str]
gitea_registration_token: ENC[AES256_GCM,data:aHoUBwPXtlme9RgGObwWt1V90JU5qeVBUtpINrb1hY6XjKi4+kLxAg==,iv:zkgDdx82Lku7/oNIoSoKUIrxvZuyPaGUI411V/rkW9c=,tag:0eBC0Kd71UwokH9scs/AKA==,type:str]
mail_password: ENC[AES256_GCM,data:fznlr+Mzu+cpHsLN8EYx6g==,iv:s/DidEGNar4jGHGcbXsysZ2grpwVO1T2Zd+jksb90T8=,tag:LgJ7r+stG7QCpX9n/UZUsA==,type:str]
navidrome_env: ENC[AES256_GCM,data:SjEg735zoiWNjp0+uYi5CyLadDd7mSXpG1LInLsaqESz0LNgMi+r46ohPjpEC3GD+WbE9D3XRwhB22oIey3K7p3GdB/bYjIR6wOa8MVjj3EDvzdBWbnhkXsGnIhLGuyZwDmMdA==,iv:gHv7lZzU09V3XVjs3nEOEm55xRwD23+sVWfgbuX18p4=,tag:8UAMIGXPGobQfBAao2nI6Q==,type:str]
yamtrack_env: ENC[AES256_GCM,data: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,iv:rHGqUoLl6iJ1+LDHSuDFuIsl/YLlb75lUwl8gaxV79c=,tag:GVet48AfHBX5IXa/u1wXFA==,type:str]
authentik_env: ENC[AES256_GCM,data:kAva3C4pWZ4+BFhGbbq9j1rSXeldb+NAwU16aZUD7wiw8k7Sg0kVq/43rj1HtR2ZTQY6DxhPlsK5I7opVAg953GwN0kTErpuhKLRWaRGSb8rC8kkxnY=,iv:X61qSjH18KQRWNOtYq1o8IZmY6Dz4TrJzehJWxE7b2o=,tag:mifmD1C3A+XSQveLviLt2w==,type:str]
authentik_env: ENC[AES256_GCM,data:oKFapxTXYWIRoXvY0vGaQiS77uAkhyVv+QCo3B3uDrQuqPonUsqTY33Qo56vtWOJG7knX7SkvvKfIytJMjTgK63Gv+yON8M9cFlwKofD4Pxb9tJR1X2npvB6UQZd1UMrBB/H6rsMECU2zyOlDQjF4w5A2cL0hFpoX7TsS7IRv227rChJskVAU5Bdr8k1kXNRnEdEQOEf97vJ+zsBZltPFXmsDx1t3qzxgWywGCt0zoaqbbuBkSk4l33d/Cdbv5MFmPh56mqpIF/skljGpkI+zYDquUaaXVekfrpaMy/U3n8oVTnbjBsf6DBBlrSk3RGz5e00IoDa52H2T4NtsJX4G1oeTDQQSCKfKqMmmov7TG8g+2rEkstY5SZ15I1ulyDWyaeY1oNWO65JUA0nC9Q=,iv:9BLyfgPj9yUvQhjlvwQhxwGJFW1Qu33MkeDd/WKxmaY=,tag:iYNXjkP3lbaJsyPTD4O3wA==,type:str]
vaultwarden_env: ENC[AES256_GCM,data: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,iv:ziOAFuLGSngOmS9cOr8LE+Qf0Wh6CSCmWNHWFahpMUk=,tag:Ssm/6hC6A3t90502qo4zng==,type:str]
vikunja_env: ENC[AES256_GCM,data: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,iv:y1XVaZV2Zt8d90CDoZXX5dAL3SBIZwTPNcopyGEr5SM=,tag:G+Yz18GWtyKRsXZsHWF5mg==,type:str]
sops:
@@ -26,7 +27,7 @@ sops:
ZQ17gIIOjhKHlGx8Lo5t/PekzFyQKCKdijS7caq74dVib1vO3tk+uQ==
-----END AGE ENCRYPTED FILE-----
recipient: age1ynu6zhhy84rr5xqce0flp25x5tnfgskesxfe39u7ewsk900fvagq9sq0lx
lastmodified: "2026-07-24T19:39:25Z"
mac: ENC[AES256_GCM,data:Gs/dqDo+NRqAb8H+L2WHuBQYisC4NEJ/zEJPSOcA8pdpdjxAbJ/Pqq/yQ4WDc/59w7pu13dddA7JmDv7sSwAmfSHVNB7JRWhfVm7YG7L5/6vSi5NG3OgJeQYcLYYJzfDK3f1FJkMe9OKV02mSZ2531AdCJmEa4URjkgXZoY8QDY=,iv:WGRxhf0A6ddi39xNlkE3yB+PybrAkZP0N1ulzA/sWvY=,tag:kW3MyTLVNaQE0M5mndurTA==,type:str]
lastmodified: "2026-08-17T14:37:39Z"
mac: ENC[AES256_GCM,data:EMQgOEPq0aeGUr9C7CzNxq2Yk++0rDp1AylfDKgmbMFonFotsj1MkFrtikm8r6EXNWuOf8u4lRy9HKtzAjg9BKHkf+rP/0x+vrfV82ubtxJnqYNYNNeEgpdFtMOU6Tv02ymX13tV9e+pvdUGtwUP57dMzCApQ9DACiMvOXQDhj4=,iv:PgGQcpSl2G2XApldBaqMnTgRGxWONARmkSZrfC041lU=,tag:63gTpOWHsyF1+1B2wlaDiA==,type:str]
unencrypted_suffix: _unencrypted
version: 3.13.2
version: 3.13.3