diff options
| author | Grisha Shipunov | 2026-07-25 11:36:28 +0000 |
|---|---|---|
| committer | Grisha Shipunov | 2026-07-25 11:36:28 +0000 |
| commit | b01909d13a4d26f2c0b91777a3dd14ad326defb1 (patch) | |
| tree | 8d6493da4aa14033527dc8fbf705654584595c77 | |
| parent | bb1a6ac57b06b2cc086fa2ba3c325f87daad9466 (diff) | |
radicale: yeet
| -rw-r--r-- | .sops.yaml | 7 | ||||
| -rw-r--r-- | hosts/radicale/default.nix | 78 | ||||
| -rw-r--r-- | hosts/radicale/radicale.nix | 21 | ||||
| -rw-r--r-- | hosts/radicale/secrets.yaml | 37 |
4 files changed, 0 insertions, 143 deletions
@@ -11,7 +11,6 @@ keys: - &forgejo age1gknaqevzuq7dtqalng3547w5qflk9a0kugymea5h54eg6twu43pqpkr4zt - &immich age1afyntwvj672lcq2e4dpxmw3syplzurnnd8q8j3265843jeedpveqkp465z - &miniflux age15ja22wd9tt60vn32sk59pp6c7vtjsn8y3rypn8qfnvxthug8sp0q6f72uh - - &radicale age1j6z39kmnxkqa7jdcjsydy5cryjce7fttf225fh3pldyvq06ax3fq58mk8c - &stream age148r2q3cy9sjem37rvgtcc4qjx8usxkdg77pqexa56gmcexn58aaslh3cnj creation_rules: - path_regex: hosts/toaster/[^/]+\.yaml$ @@ -38,12 +37,6 @@ creation_rules: - *admin_toaster - *admin_frituurpan - *auth - - path_regex: hosts/radicale/[^/]+\.yaml$ - key_groups: - - age: - - *admin_toaster - - *admin_frituurpan - - *radicale - path_regex: hosts/immich/[^/]+\.yaml$ key_groups: - age: diff --git a/hosts/radicale/default.nix b/hosts/radicale/default.nix deleted file mode 100644 index db82eb0..0000000 --- a/hosts/radicale/default.nix +++ /dev/null @@ -1,78 +0,0 @@ -{ config, lib, ... }: -let - mac = "02:00:00:00:00:02"; -in -{ - imports = [ - ./radicale.nix - ]; - sops.defaultSopsFile = ./secrets.yaml; - sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; - - sops.secrets = { - "wg/0xa-proxy" = { - owner = config.users.users.systemd-network.name; - }; - }; - - microvm = { - hypervisor = "cloud-hypervisor"; - vsock.cid = 3 + 2; - mem = 1 * 1024; - vcpu = 1; - interfaces = [ - { - type = "tap"; - id = "uvm-radicale"; - mac = mac; - } - ]; - shares = [ - { - source = "/nix/store"; - mountPoint = "/nix/.ro-store"; - tag = "store"; - proto = "virtiofs"; - socket = "store.socket"; - } - ] - ++ - map - (dir: { - source = dir; - mountPoint = "/${dir}"; - tag = dir; - proto = "virtiofs"; - socket = "${dir}.socket"; - }) - [ - "etc" - "var" - "home" - ]; - }; - - networking.useNetworkd = true; - networking.firewall.enable = lib.mkForce false; # firewalling done by the host - - systemd.network = { - enable = true; - networks."11-host" = { - matchConfig.MACAddress = mac; - networkConfig = { - Address = "10.99.99.12/24"; - DHCP = "no"; - }; - routes = [ - { - Gateway = "10.99.99.1"; - Destination = "0.0.0.0/0"; - Metric = 1024; - } - ]; - }; - }; - - networking.hostName = "radicale"; - system.stateVersion = "24.11"; -} diff --git a/hosts/radicale/radicale.nix b/hosts/radicale/radicale.nix deleted file mode 100644 index c200013..0000000 --- a/hosts/radicale/radicale.nix +++ /dev/null @@ -1,21 +0,0 @@ -{ ... }: -{ - services.radicale = { - enable = true; - settings = { - server = { - hosts = [ - "0.0.0.0:5232" - "[::]:5232" - ]; - ssl = "False"; - }; - auth = { - type = "http_x_remote_user"; - }; - rights = { - type = "owner_only"; - }; - }; - }; -} diff --git a/hosts/radicale/secrets.yaml b/hosts/radicale/secrets.yaml deleted file mode 100644 index eaea8e0..0000000 --- a/hosts/radicale/secrets.yaml +++ /dev/null @@ -1,37 +0,0 @@ -wg: - 0xa-proxy: ENC[AES256_GCM,data:am8oeEjo7QUJp7lutrBgUovOW2GXf4tS7KUhcZKTiSt6ilk9FVXnG9AYCSE=,iv:Ra/aZI+d9ozGW4lv2lCVXaL7Kc5+xDvUtAAEeX+SZ0Q=,tag:WqRN0llEoXQkaSzNVEaPUA==,type:str] -sops: - age: - - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyBTVzRY - L3J5S0ZJcFR4TXQzZE9FbURJTG1UREVEQmMvOVBRbnl2TlFOR1U4CkxZUEZxalIy - K0lLYzUzZDRBbVlhNjVMcCt3TTkya0xzQmxmS29qYUp3VzQKLS0tIHM0UU5od1pL - aFZDOGorQzA2bnhsb3ZjWGQzNHZoakhDdWcyTldqVXpHczAKpz7I7nyegOZAR23M - J/hCBRLgPL4F9nlHZtkNrKUsuXY9ImWmoZNT5CxaCHiLt1m2LUHmquUVN/oSAmny - Fz5qaw== - -----END AGE ENCRYPTED FILE----- - - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSBqcWdS - T09hUWFCRjQ4bWVUZTFwTVlhcUhabmtuSjhwWWloN3VoZWtEaTBFCk41OWZPU2tY - QU9HdFIyYzdVUDZpTFE5cE1VSTI1TVpqcFJhZzlKL2k4eXMKLS0tIE9QaHA0WHox - a2F2VCtpRW8xRXA1dXlGSTRjMDBPc0MwQlRscWY5VExJVkkKWfwsMGjQfafj5Xlw - 0wZgUX23Q+ggvNun/ZBssu1hJtqqIYmYgS5/j2EJrMSxkpFyJFpAUO5bLZpimt3W - rR+Dog== - -----END AGE ENCRYPTED FILE----- - - recipient: age1j6z39kmnxkqa7jdcjsydy5cryjce7fttf225fh3pldyvq06ax3fq58mk8c - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiSmgwSE1zd1ZYdTQ3K2RD - WXJTc2JkV1oxNGNOZlhNclBSeWlQU3lNOVZvCmplWlk5RDROVHp0anRuZjBPTnB2 - Sll4YkFoUy9LNzVPM2ZzSkhwdUNHdkEKLS0tIEkzSmk1YndiZjBzTVNJcDQzRG01 - WGtQSnhzS0FVcWZDMmxYdWdPN2tPWEEK3PePBWzhB4zMvtsEQ63zVuiYyzQpIqje - mdH8xZDAU6WIn3aPRZw7ohIIsjVRNOtKHFGQvhYYI7y2qFxtigRRtA== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-01-21T00:19:53Z" - mac: ENC[AES256_GCM,data:iAcX1jJNcJNZ6kQ7dKiTJejhcdx1E/B9QEQwGGYeIKuo31qAD/vWWwFrPGWBfqB5K3fgutNVNhrlWeok7M/16pI3fPSmJZLdRxjmV38dVIL9zdjEdUKfRjHhUVh11BRHQ1he1hX0qhCw9htA0F1tgAoLd01VFtY6KEKo+aPs4Qk=,iv:PDR/S9EgI7pQUpjiAENbI5qCc7Q44h88/ZWaEqgg1X4=,tag:EE4wCIZt35fvUi9S3lmBXw==,type:str] - unencrypted_suffix: _unencrypted - version: 3.9.3 |
