dotfiles @ 6016e1fb7a4e3a76391f024ac76e170e33bf4a99

M nix/flake.lock

···
                93
                93
                         ]

              
                94
                94
                       },

              
                95
                95
                       "locked": {

              
                96
                
                -        "lastModified": 1774130688,

              
                97
                
                -        "narHash": "sha256-j+ZRZJlcgZxIg1zOqNDjy+rUhcRhmdOSh6slcyolVw4=",

              
                
                96
                +        "lastModified": 1774641352,

              
                
                97
                +        "narHash": "sha256-g5Y0zW+Oa3nKpA2wbHVvQJTH4+FishXOR0PxBNo4On8=",

              
                98
                98
                         "owner": "olexsmir",

              
                99
                99
                         "repo": "mugit",

              
                100
                
                -        "rev": "8287e68ce6dd20094e2f7f9562d5378f9b97533f",

              
                
                100
                +        "rev": "c1b5a725e6aaf13c8d6f7fcd63844b63d6151a42",

              
                101
                101
                         "type": "github"

              
                102
                102
                       },

              
                103
                103
                       "original": {

              ···
                108
                108
                     },

              
                109
                109
                     "nixpkgs": {

              
                110
                110
                       "locked": {

              
                111
                
                -        "lastModified": 1773964973,

              
                112
                
                -        "narHash": "sha256-NV/J+tTER0P5iJhUDL/8HO5MDjDceLQPRUYgdmy5wXw=",

              
                
                111
                +        "lastModified": 1774388614,

              
                
                112
                +        "narHash": "sha256-tFwzTI0DdDzovdE9+Ras6CUss0yn8P9XV4Ja6RjA+nU=",

              
                113
                113
                         "owner": "NixOS",

              
                114
                114
                         "repo": "nixpkgs",

              
                115
                
                -        "rev": "812b3986fd1568f7a858f97fcf425ad996ba7d25",

              
                
                115
                +        "rev": "1073dad219cb244572b74da2b20c7fe39cb3fa9e",

              
                116
                116
                         "type": "github"

              
                117
                117
                       },

              
                118
                118
                       "original": {

              

M nix/hosts/thought/configuration.nix

···
                31
                31
                     caddy.enable = true;

              
                32
                32
                     openssh = {

              
                33
                33
                       enable = true;

              
                34
                
                -      ports = [ 2222 ];

              
                
                34
                +      ports = [ 22 ];

              
                35
                35
                       settings = {

              
                36
                36
                         PasswordAuthentication = false;

              
                37
                37
                         PermitRootLogin = "no";

              

M nix/modules/services/mugit.nix

···
                1
                
                -{ config, ... }:

              
                2
                
                -let mkSec = file: { inherit file; owner = "mugit"; group = "mugit"; };

              
                3
                
                -in {

              
                4
                
                -  age.secrets.github-token = mkSec ../../secrets/github-token.age;

              
                5
                
                -  age.secrets.mugit-host   = mkSec ../../secrets/mugit-host.age;

              
                
                1
                +{ config, ... }: {

              
                
                2
                +  age.secrets.github-token = {

              
                
                3
                +    file = ../../secrets/github-token.age;

              
                
                4
                +    owner = "git";

              
                
                5
                +    group = "git";

              
                
                6
                +  };

              
                6
                7
                 

              
                7
                
                -  networking.firewall.allowedTCPPorts = [ 22 ];

              
                8
                8
                   services.caddy.virtualHosts."git.olexsmir.xyz".extraConfig = ''

              
                9
                9
                     reverse_proxy localhost:8008

              
                10
                10
                   '';

              ···
                22
                22
                       };

              
                23
                23
                       ssh = {

              
                24
                24
                         enable = true;

              
                25
                
                -        port = 22;

              
                26
                
                -        host_key = config.age.secrets.mugit-host.path;

              
                27
                25
                         keys = [

              
                28
                26
                           "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPLLJdkVYKZgsayw+sHanKPKZbI0RMS2CakqBCEi5Trz"

              
                29
                27
                           "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMPQ0Qz0DFB+rGrD8ScUqbUTZ1/O8FHrOBF5bIAGQgMj"