dotfiles @ 6016e1f

···
        93
        93
                 ]

      
        94
        94
               },

      
        95
        95
               "locked": {

      
        96
        
        -        "lastModified": 1774130688,

      
        97
        
        -        "narHash": "sha256-j+ZRZJlcgZxIg1zOqNDjy+rUhcRhmdOSh6slcyolVw4=",

      
        
        96
        +        "lastModified": 1774641352,

      
        
        97
        +        "narHash": "sha256-g5Y0zW+Oa3nKpA2wbHVvQJTH4+FishXOR0PxBNo4On8=",

      
        98
        98
                 "owner": "olexsmir",

      
        99
        99
                 "repo": "mugit",

      
        100
        
        -        "rev": "8287e68ce6dd20094e2f7f9562d5378f9b97533f",

      
        
        100
        +        "rev": "c1b5a725e6aaf13c8d6f7fcd63844b63d6151a42",

      
        101
        101
                 "type": "github"

      
        102
        102
               },

      
        103
        103
               "original": {

      ···
        108
        108
             },

      
        109
        109
             "nixpkgs": {

      
        110
        110
               "locked": {

      
        111
        
        -        "lastModified": 1773964973,

      
        112
        
        -        "narHash": "sha256-NV/J+tTER0P5iJhUDL/8HO5MDjDceLQPRUYgdmy5wXw=",

      
        
        111
        +        "lastModified": 1774388614,

      
        
        112
        +        "narHash": "sha256-tFwzTI0DdDzovdE9+Ras6CUss0yn8P9XV4Ja6RjA+nU=",

      
        113
        113
                 "owner": "NixOS",

      
        114
        114
                 "repo": "nixpkgs",

      
        115
        
        -        "rev": "812b3986fd1568f7a858f97fcf425ad996ba7d25",

      
        
        115
        +        "rev": "1073dad219cb244572b74da2b20c7fe39cb3fa9e",

      
        116
        116
                 "type": "github"

      
        117
        117
               },

      
        118
        118
               "original": {

      

···
        31
        31
             caddy.enable = true;

      
        32
        32
             openssh = {

      
        33
        33
               enable = true;

      
        34
        
        -      ports = [ 2222 ];

      
        
        34
        +      ports = [ 22 ];

      
        35
        35
               settings = {

      
        36
        36
                 PasswordAuthentication = false;

      
        37
        37
                 PermitRootLogin = "no";

      

···
        1
        
        -{ config, ... }:

      
        2
        
        -let mkSec = file: { inherit file; owner = "mugit"; group = "mugit"; };

      
        3
        
        -in {

      
        4
        
        -  age.secrets.github-token = mkSec ../../secrets/github-token.age;

      
        5
        
        -  age.secrets.mugit-host   = mkSec ../../secrets/mugit-host.age;

      
        
        1
        +{ config, ... }: {

      
        
        2
        +  age.secrets.github-token = {

      
        
        3
        +    file = ../../secrets/github-token.age;

      
        
        4
        +    owner = "git";

      
        
        5
        +    group = "git";

      
        
        6
        +  };

      
        6
        7
         

      
        7
        
        -  networking.firewall.allowedTCPPorts = [ 22 ];

      
        8
        8
           services.caddy.virtualHosts."git.olexsmir.xyz".extraConfig = ''

      
        9
        9
             reverse_proxy localhost:8008

      
        10
        10
           '';

      ···
        22
        22
               };

      
        23
        23
               ssh = {

      
        24
        24
                 enable = true;

      
        25
        
        -        port = 22;

      
        26
        
        -        host_key = config.age.secrets.mugit-host.path;

      
        27
        25
                 keys = [

      
        28
        26
                   "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPLLJdkVYKZgsayw+sHanKPKZbI0RMS2CakqBCEi5Trz"

      
        29
        27
                   "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMPQ0Qz0DFB+rGrD8ScUqbUTZ1/O8FHrOBF5bIAGQgMj"