flake.lock: update

flake.lock

@@ -118,11 +118,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772633327,
+        "lastModified": 1773422513,
-        "narHash": "sha256-jl+DJB2DUx7EbWLRng+6HNWW/1/VQOnf0NsQB4PlA7I=",
+        "narHash": "sha256-MPjR48roW7CUMU6lu0+qQGqj92Kuh3paIulMWFZy+NQ=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "5a75730e6f21ee624cbf86f4915c6e7489c74acc",
+        "rev": "ef12a9a2b0f77c8fa3dda1e7e494fca668909056",
         "type": "github"
       },
       "original": {
@@ -206,11 +206,11 @@
         "xdph": "xdph"
       },
       "locked": {
-        "lastModified": 1772723663,
+        "lastModified": 1773439168,
-        "narHash": "sha256-OKaOxpeK42A0QdlUkl68/4l32EZzQRHjKzBHXI3Q2a8=",
+        "narHash": "sha256-BP8JCxijLBf5Qk83lEN/9qAOeDuAnftfmr92KQM1QOI=",
         "owner": "hyprwm",
         "repo": "Hyprland",
-        "rev": "ae9ca17b40e04cd11b53b82e9292d3070710df18",
+        "rev": "9bf8fe7a5278b5f366384d73d87844a165c16b7a",
         "type": "github"
       },
       "original": {
@@ -468,11 +468,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1772736753,
+        "lastModified": 1773231277,
-        "narHash": "sha256-au/m3+EuBLoSzWUCb64a/MZq6QUtOV8oC0D9tY2scPQ=",
+        "narHash": "sha256-Xy3WEpUAbpsz8ydgvVAQAGGB/WB+8cNA5cshiL0McTI=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "917fec990948658ef1ccd07cef2a1ef060786846",
+        "rev": "75690239f08f885ca9b0267580101f60d10fbe62",
         "type": "github"
       },
       "original": {
@@ -594,11 +594,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772495394,
+        "lastModified": 1773096132,
-        "narHash": "sha256-hmIvE/slLKEFKNEJz27IZ8BKlAaZDcjIHmkZ7GCEjfw=",
+        "narHash": "sha256-M3zEnq9OElB7zqc+mjgPlByPm1O5t2fbUrH3t/Hm5Ag=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "1d9b98a29a45abe9c4d3174bd36de9f28755e3ff",
+        "rev": "d1ff3b1034d5bab5d7d8086a7803c5a5968cd784",
         "type": "github"
       },
       "original": {

machines/bomba/secrets.nix

@@ -1,6 +1,23 @@
-{ ... }:
+{ config, ... }:
 {
-  sops.secrets = {
+  sops = {
-    nextcloud_password.sopsFile = ../../secrets/bomba.sops.yaml;
+    secrets = {
+      nextcloud_password = {
+        owner = "nextcloud";
+        sopsFile = ../../secrets/bomba.sops.yaml;
+      };
+      ntfy_users = {
+        owner = "ntfy-sh";
+        sopsFile = ../../secrets/bomba.sops.yaml;
+      };
+      ntfy_access = {
+        owner = "ntfy-sh";
+        sopsFile = ../../secrets/bomba.sops.yaml;
+      };
+    };
+    templates."ntfy.env".content = ''
+      NTFY_AUTH_USERS='${config.sops.placeholder.ntfy_users}'
+      NTFY_AUTH_ACCESS='${config.sops.placeholder.ntfy_access}'
+    '';
   };
 }

machines/bomba/services/default.nix

@@ -1,9 +1,10 @@
 { ... }:
 {
   imports = [
+    # ./nginx.nix
     ./gitea.nix
     ./nextcloud.nix
-    # ./nginx.nix
+    ./ntfy.nix
     ./octoprint.nix
     ./vaultwarden.nix
   ];

machines/bomba/services/nextcloud.nix

@@ -19,6 +19,11 @@
       settings = {
         default_phone_region = "IT";
         overwriteprotocol = "https";
+        mail_domain = "patrickcanal.it";
+        mail_from_address = "nextcloud";
+        mail_smtphost = "127.0.0.1";
+        mail_smtpport = 25;
+        log_type = "file";
         trusted_domains = [
           "nextcloud.patrickcanal.it"
         ];

machines/bomba/services/ntfy.nix

@@ -0,0 +1,16 @@
+{ config, ... }:
+{
+  services.ntfy-sh = {
+    enable = true;
+    environmentFile = config.sops.templates."ntfy.env".path;
+    settings = {
+      listen-http = ":8005";
+      base-url = "https://ntfy.patrickcanal.it";
+      smtp-server-listen = ":25";
+      smtp-server-domain = "patrickcanal.it";
+      behind-proxy = true;
+      enable-login = true;
+      require-login = true;
+    };
+  };
+}

secrets/bomba.sops.yaml

@@ -1,4 +1,6 @@
 nextcloud_password: ENC[AES256_GCM,data:lMavQvl4grki9c5AgaKE8Q==,iv:jJ0/Wka5/2TBD4C739HBeiVzxujWC4WL6FDLqov6FVA=,tag:1skCLwSr6VSzZWthtzaxwg==,type:str]
+ntfy_users: ENC[AES256_GCM,data:jFN6axA2cyszWRWRcLMe0KRmLeqM8rPho7/k0tOZGajJ33CO7uAul9tQ9LjEl59lhgrX13fnH5ofBOoRZAC/Ck1wS/PcSbSO,iv:TlelbuZkIo8iI5njBEQQLK8FClbpDo/bFraLwoQ0Kkk=,tag:M9Uh5SHs77ONsnPIqZuO2g==,type:str]
+ntfy_access: ENC[AES256_GCM,data:7bcKYCS8,iv:Wwm1g/+0SzgAYh2tjKvJQEL2RJDG2tKqI4OjNeJjvio=,tag:nJ304eakWx0Kvo8I8bXPJQ==,type:str]
 sops:
     age:
         - recipient: age1ynu6zhhy84rr5xqce0flp25x5tnfgskesxfe39u7ewsk900fvagq9sq0lx
@@ -10,7 +12,7 @@ sops:
             YjVvSDV1TGExYUJGUk00MTF4bXNFVTQKG/GueSmnuA23L42X6AvAWZgBbJuCGLw1
             ZQ17gIIOjhKHlGx8Lo5t/PekzFyQKCKdijS7caq74dVib1vO3tk+uQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-13T07:59:07Z"
+    lastmodified: "2026-03-14T07:23:58Z"
-    mac: ENC[AES256_GCM,data:xJWtKkpQuAPXcToLfWuEshInHIBG59uKoQAh3+SmKu/UAkvMDNywMZbBhrxn/cF/xo8TKkaPxd4luXsdw+Z0YvVezn43jKNyXsIrUNtd5hMlE4hbAuAf/ifb3t2AVg1s/R6GZWMZvc0rmSePTWyowHgceaxTqHPr6vvHEVHt0oM=,iv:UXYUS/sn1+TcUOAWAQC1y+TtDIayNez6ssYh+Qt5AmI=,tag:YgWujpGrzwtjnEsLoKm3ig==,type:str]
+    mac: ENC[AES256_GCM,data:nCPTfEu1wGfUtnJzMQISmrd5DHSffMacwgVYurFE1sWzhDue2fXssUCTbqf/bnzak5kB2TFkpZGH+SywC8BrCh+pRyG+Ey2HMHDCkM8eXrfyFxzV8k3V0pa9Ek+Rs63vaX1lRFBFh4iQtdLThjs/mnw3nla/B8wO/ArZ3NhF95k=,iv:8160XN5N36HwgjDUWulvS6tBk80svOt7DtXNqNNv5zU=,tag:1nrrxUjKTV0pPUr8S6e9+g==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.12.1