feat(bomba): add homebox

.migrate

@@ -0,0 +1,37 @@
+{
+  "lastRun": "1763873600000-backfill-files-owner.js",
+  "migrations": [
+    {
+      "title": "1694360000000-create-folders.js",
+      "timestamp": 1783750350595
+    },
+    {
+      "title": "1694360479680-create-account-db.js",
+      "timestamp": 1783750350654
+    },
+    {
+      "title": "1694362247011-create-secret-table.js",
+      "timestamp": 1783750350670
+    },
+    {
+      "title": "1702667624000-rename-nordigen-secrets.js",
+      "timestamp": 1783750350671
+    },
+    {
+      "title": "1718889148000-openid.js",
+      "timestamp": 1783750350688
+    },
+    {
+      "title": "1719409568000-multiuser.js",
+      "timestamp": 1783750350708
+    },
+    {
+      "title": "1763873568237-server-global-prefs.js",
+      "timestamp": 1783750350724
+    },
+    {
+      "title": "1763873600000-backfill-files-owner.js",
+      "timestamp": 1783750350726
+    }
+  ]
+}

machines/bomba/secrets.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{... }:
 {
   sops =
     let
@@ -25,12 +25,5 @@
         navidrome_env = default;
         yamtrack_env = default;
       };
-      templates = {
-        "gitea_runner.env".content = ''
-          GITEA_INSTANCE_URL=${config.services.gitea.settings.server.ROOT_URL}
-          GITEA_RUNNER_NAME="Runner"
-          GITEA_RUNNER_REGISTRATION_TOKEN=${config.sops.placeholder.gitea_registration_token}
-        '';
-      };
     };
 }

machines/bomba/services/actual.nix

@@ -0,0 +1,9 @@
+{ ... }:
+{
+  services.actual = {
+    enable = true;
+    settings = {
+      port = 8015;
+    };
+  };
+}

machines/bomba/services/caddy.nix

@@ -8,7 +8,7 @@
   services.caddy =
     let
       basicAuth = ''
-        basicauth {
+        basic_auth {
           ${currentSystemUser} $2a$14$L6SBwu.0FhGBYwH2LWa6uOrBSeRHo8Lo95Vkle/g5uB7kZl7nmJPO
         }
       '';
@@ -77,6 +77,12 @@
         "yamtrack.patrickcanal.it".extraConfig = ''
           reverse_proxy :8014
         '';
+        "actual.patrickcanal.it".extraConfig = ''
+          reverse_proxy :${toString config.services.actual.settings.port}
+        '';
+        "inventory.patrickcanal.it".extraConfig = ''
+          reverse_proxy :${toString config.services.homebox.settings.HBOX_WEB_PORT}
+        '';
       };
     };
 

machines/bomba/services/default.nix

@@ -1,8 +1,11 @@
 { ... }:
 {
   imports = [
+    ./actual.nix
     ./caddy.nix
+    ./fail2ban.nix
     ./gitea.nix
+    ./homebox.nix
     ./navidrome.nix
     ./nextcloud.nix
     ./nixflix.nix

machines/bomba/services/fail2ban.nix

@@ -0,0 +1,13 @@
+{ ... }:
+{
+  services.fail2ban = {
+    enable = true;
+    ignoreIP = [ "192.168.1.0/24" ];
+    bantime = "4h";
+    bantime-increment = {
+      enable = true; 
+      multipliers = "1 2 4 8 16 32 64";
+      overalljails = true;
+    };
+  };
+}

machines/bomba/services/gitea.nix

@@ -11,14 +11,4 @@
       service.DISABLE_REGISTRATION = true;
     };
   };
-
-  config.virtualisation.oci-containers.containers.gitea-act-runner = {
-    image = "docker.io/gitea/act_runner:latest";
-    environmentFiles = [
-      config.sops.templates."gitea_runner.env".path
-    ];
-    volumes = [
-      "/var/run/docker.sock:/var/run/docker.sock"
-    ];
-  };
 }

machines/bomba/services/homebox.nix

@@ -0,0 +1,10 @@
+{ ... }:
+{
+  services.homebox = {
+    enable = true;
+    settings = {
+      HBOX_WEB_PORT = "8016"; 
+      HBOX_OPTIONS_ALLOW_REGISTRATION = "false";
+    };
+  };
+}