alyraffauf/nixcfg
1
0
Fork 0
mirror of https://github.com/alyraffauf/nixcfg.git synced 2024-11-21 20:33:55 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

mauville,slateport: prepare k3s cluster

Browse source
This commit is contained in:
Aly Raffauf 2024-08-26 21:47:30 -04:00
parent 363b6dfebb
commit 6b021c3247
3 changed files with 12 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
hosts/mauville/raffauflabs.nix
View file

@ -29,7 +29,8 @@
}; };
in { in {
networking = { networking = {
firewall.allowedTCPPorts = [80 443 3000]; firewall.allowedTCPPorts = [80 443 2379 2380 3000 6443];
firewall.allowedUDPPorts = [8472];
}; };
services = { services = {
@ -90,6 +91,13 @@ in {
}; };
}; };
k3s = {
enable = true;
role = "server";
tokenFile = config.age.secrets.k3s.path;
serverAddr = "http://192.168.0.104:6443";
};
navidrome = { navidrome = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;

2
hosts/mauville/secrets.nix
View file

@ -1,6 +1,6 @@
{ {
age.secrets = { age.secrets = {
cloudflare.file = ../../secrets/cloudflare.age; k3s.file = ../../secrets/k3s.age;
lastfmId = { lastfmId = {
owner = "navidrome"; owner = "navidrome";

3
hosts/slateport/raffauflabs.nix
View file

@ -3,7 +3,8 @@
domain = "raffauflabs.com"; domain = "raffauflabs.com";
in { in {
networking = { networking = {
firewall.allowedTCPPorts = [80 443]; firewall.allowedTCPPorts = [80 443 2379 2380 6443];
firewall.allowedUDPPorts = [8472];
}; };
security.acme = { security.acme = {