summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGrisha Shipunov2026-07-25 11:36:28 +0000
committerGrisha Shipunov2026-07-25 11:36:28 +0000
commitb01909d13a4d26f2c0b91777a3dd14ad326defb1 (patch)
tree8d6493da4aa14033527dc8fbf705654584595c77
parentbb1a6ac57b06b2cc086fa2ba3c325f87daad9466 (diff)
radicale: yeet
-rw-r--r--.sops.yaml7
-rw-r--r--hosts/radicale/default.nix78
-rw-r--r--hosts/radicale/radicale.nix21
-rw-r--r--hosts/radicale/secrets.yaml37
4 files changed, 0 insertions, 143 deletions
diff --git a/.sops.yaml b/.sops.yaml
index 74029b9..876b280 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -11,7 +11,6 @@ keys:
- &forgejo age1gknaqevzuq7dtqalng3547w5qflk9a0kugymea5h54eg6twu43pqpkr4zt
- &immich age1afyntwvj672lcq2e4dpxmw3syplzurnnd8q8j3265843jeedpveqkp465z
- &miniflux age15ja22wd9tt60vn32sk59pp6c7vtjsn8y3rypn8qfnvxthug8sp0q6f72uh
- - &radicale age1j6z39kmnxkqa7jdcjsydy5cryjce7fttf225fh3pldyvq06ax3fq58mk8c
- &stream age148r2q3cy9sjem37rvgtcc4qjx8usxkdg77pqexa56gmcexn58aaslh3cnj
creation_rules:
- path_regex: hosts/toaster/[^/]+\.yaml$
@@ -38,12 +37,6 @@ creation_rules:
- *admin_toaster
- *admin_frituurpan
- *auth
- - path_regex: hosts/radicale/[^/]+\.yaml$
- key_groups:
- - age:
- - *admin_toaster
- - *admin_frituurpan
- - *radicale
- path_regex: hosts/immich/[^/]+\.yaml$
key_groups:
- age:
diff --git a/hosts/radicale/default.nix b/hosts/radicale/default.nix
deleted file mode 100644
index db82eb0..0000000
--- a/hosts/radicale/default.nix
+++ /dev/null
@@ -1,78 +0,0 @@
-{ config, lib, ... }:
-let
- mac = "02:00:00:00:00:02";
-in
-{
- imports = [
- ./radicale.nix
- ];
- sops.defaultSopsFile = ./secrets.yaml;
- sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
-
- sops.secrets = {
- "wg/0xa-proxy" = {
- owner = config.users.users.systemd-network.name;
- };
- };
-
- microvm = {
- hypervisor = "cloud-hypervisor";
- vsock.cid = 3 + 2;
- mem = 1 * 1024;
- vcpu = 1;
- interfaces = [
- {
- type = "tap";
- id = "uvm-radicale";
- mac = mac;
- }
- ];
- shares = [
- {
- source = "/nix/store";
- mountPoint = "/nix/.ro-store";
- tag = "store";
- proto = "virtiofs";
- socket = "store.socket";
- }
- ]
- ++
- map
- (dir: {
- source = dir;
- mountPoint = "/${dir}";
- tag = dir;
- proto = "virtiofs";
- socket = "${dir}.socket";
- })
- [
- "etc"
- "var"
- "home"
- ];
- };
-
- networking.useNetworkd = true;
- networking.firewall.enable = lib.mkForce false; # firewalling done by the host
-
- systemd.network = {
- enable = true;
- networks."11-host" = {
- matchConfig.MACAddress = mac;
- networkConfig = {
- Address = "10.99.99.12/24";
- DHCP = "no";
- };
- routes = [
- {
- Gateway = "10.99.99.1";
- Destination = "0.0.0.0/0";
- Metric = 1024;
- }
- ];
- };
- };
-
- networking.hostName = "radicale";
- system.stateVersion = "24.11";
-}
diff --git a/hosts/radicale/radicale.nix b/hosts/radicale/radicale.nix
deleted file mode 100644
index c200013..0000000
--- a/hosts/radicale/radicale.nix
+++ /dev/null
@@ -1,21 +0,0 @@
-{ ... }:
-{
- services.radicale = {
- enable = true;
- settings = {
- server = {
- hosts = [
- "0.0.0.0:5232"
- "[::]:5232"
- ];
- ssl = "False";
- };
- auth = {
- type = "http_x_remote_user";
- };
- rights = {
- type = "owner_only";
- };
- };
- };
-}
diff --git a/hosts/radicale/secrets.yaml b/hosts/radicale/secrets.yaml
deleted file mode 100644
index eaea8e0..0000000
--- a/hosts/radicale/secrets.yaml
+++ /dev/null
@@ -1,37 +0,0 @@
-wg:
- 0xa-proxy: ENC[AES256_GCM,data:am8oeEjo7QUJp7lutrBgUovOW2GXf4tS7KUhcZKTiSt6ilk9FVXnG9AYCSE=,iv:Ra/aZI+d9ozGW4lv2lCVXaL7Kc5+xDvUtAAEeX+SZ0Q=,tag:WqRN0llEoXQkaSzNVEaPUA==,type:str]
-sops:
- age:
- - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyBTVzRY
- L3J5S0ZJcFR4TXQzZE9FbURJTG1UREVEQmMvOVBRbnl2TlFOR1U4CkxZUEZxalIy
- K0lLYzUzZDRBbVlhNjVMcCt3TTkya0xzQmxmS29qYUp3VzQKLS0tIHM0UU5od1pL
- aFZDOGorQzA2bnhsb3ZjWGQzNHZoakhDdWcyTldqVXpHczAKpz7I7nyegOZAR23M
- J/hCBRLgPL4F9nlHZtkNrKUsuXY9ImWmoZNT5CxaCHiLt1m2LUHmquUVN/oSAmny
- Fz5qaw==
- -----END AGE ENCRYPTED FILE-----
- - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSBqcWdS
- T09hUWFCRjQ4bWVUZTFwTVlhcUhabmtuSjhwWWloN3VoZWtEaTBFCk41OWZPU2tY
- QU9HdFIyYzdVUDZpTFE5cE1VSTI1TVpqcFJhZzlKL2k4eXMKLS0tIE9QaHA0WHox
- a2F2VCtpRW8xRXA1dXlGSTRjMDBPc0MwQlRscWY5VExJVkkKWfwsMGjQfafj5Xlw
- 0wZgUX23Q+ggvNun/ZBssu1hJtqqIYmYgS5/j2EJrMSxkpFyJFpAUO5bLZpimt3W
- rR+Dog==
- -----END AGE ENCRYPTED FILE-----
- - recipient: age1j6z39kmnxkqa7jdcjsydy5cryjce7fttf225fh3pldyvq06ax3fq58mk8c
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiSmgwSE1zd1ZYdTQ3K2RD
- WXJTc2JkV1oxNGNOZlhNclBSeWlQU3lNOVZvCmplWlk5RDROVHp0anRuZjBPTnB2
- Sll4YkFoUy9LNzVPM2ZzSkhwdUNHdkEKLS0tIEkzSmk1YndiZjBzTVNJcDQzRG01
- WGtQSnhzS0FVcWZDMmxYdWdPN2tPWEEK3PePBWzhB4zMvtsEQ63zVuiYyzQpIqje
- mdH8xZDAU6WIn3aPRZw7ohIIsjVRNOtKHFGQvhYYI7y2qFxtigRRtA==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-21T00:19:53Z"
- mac: ENC[AES256_GCM,data:iAcX1jJNcJNZ6kQ7dKiTJejhcdx1E/B9QEQwGGYeIKuo31qAD/vWWwFrPGWBfqB5K3fgutNVNhrlWeok7M/16pI3fPSmJZLdRxjmV38dVIL9zdjEdUKfRjHhUVh11BRHQ1he1hX0qhCw9htA0F1tgAoLd01VFtY6KEKo+aPs4Qk=,iv:PDR/S9EgI7pQUpjiAENbI5qCc7Q44h88/ZWaEqgg1X4=,tag:EE4wCIZt35fvUi9S3lmBXw==,type:str]
- unencrypted_suffix: _unencrypted
- version: 3.9.3