From 7be7bf0700dd2ae6e9e9b9726ec94d211f4615d7 Mon Sep 17 00:00:00 2001 From: Grisha Shipunov Date: Sat, 25 Jul 2026 13:34:43 +0000 Subject: conduwuit: yeet --- hosts/conduwuit/conduwuit.nix | 24 ------------- hosts/conduwuit/default.nix | 78 ------------------------------------------- hosts/conduwuit/secrets.yaml | 37 -------------------- 3 files changed, 139 deletions(-) delete mode 100644 hosts/conduwuit/conduwuit.nix delete mode 100644 hosts/conduwuit/default.nix delete mode 100644 hosts/conduwuit/secrets.yaml (limited to 'hosts/conduwuit') diff --git a/hosts/conduwuit/conduwuit.nix b/hosts/conduwuit/conduwuit.nix deleted file mode 100644 index 8e344e5..0000000 --- a/hosts/conduwuit/conduwuit.nix +++ /dev/null @@ -1,24 +0,0 @@ -{ pkgs, ... }: -{ - services.matrix-conduit = { - enable = true; - package = pkgs.matrix-conduit; - settings = { - global = { - database_backend = "rocksdb"; - enable_lightning_bolt = false; - port = 6167; - server_name = "oxapentane.com"; - address = "0.0.0.0"; - trusted_servers = [ - "matrix.org" - "matrix.c3d2.de" - ]; - well_known = { - client = "https://oxapentane.com"; - server = "oxapentane.com:443"; - }; - }; - }; - }; -} diff --git a/hosts/conduwuit/default.nix b/hosts/conduwuit/default.nix deleted file mode 100644 index 0f556b8..0000000 --- a/hosts/conduwuit/default.nix +++ /dev/null @@ -1,78 +0,0 @@ -{ config, lib, ... }: -let - mac = "02:00:00:00:00:06"; -in -{ - imports = [ - ./conduwuit.nix - ]; - sops.defaultSopsFile = ./secrets.yaml; - sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; - - sops.secrets = { - "wg/0xa-proxy" = { - owner = config.users.users.systemd-network.name; - }; - }; - - microvm = { - hypervisor = "cloud-hypervisor"; - vsock.cid = 3 + 6; - mem = 3 * 1024; - vcpu = 2; - interfaces = [ - { - type = "tap"; - id = "uvm-conduwuit"; - mac = mac; - } - ]; - shares = [ - { - source = "/nix/store"; - mountPoint = "/nix/.ro-store"; - tag = "store"; - proto = "virtiofs"; - socket = "store.socket"; - } - ] - ++ - map - (dir: { - source = dir; - mountPoint = "/${dir}"; - tag = dir; - proto = "virtiofs"; - socket = "${dir}.socket"; - }) - [ - "etc" - "var" - "home" - ]; - }; - - networking.useNetworkd = true; - networking.firewall.enable = lib.mkForce false; # firewalling done by the host - - systemd.network = { - enable = true; - networks."11-host" = { - matchConfig.MACAddress = mac; - networkConfig = { - Address = "10.99.99.16/24"; - DHCP = "no"; - }; - routes = [ - { - Gateway = "10.99.99.1"; - Destination = "0.0.0.0/0"; - Metric = 1024; - } - ]; - }; - }; - - networking.hostName = "conduwuit"; - system.stateVersion = "24.11"; -} diff --git a/hosts/conduwuit/secrets.yaml b/hosts/conduwuit/secrets.yaml deleted file mode 100644 index 452ca16..0000000 --- a/hosts/conduwuit/secrets.yaml +++ /dev/null @@ -1,37 +0,0 @@ -wg: - 0xa-proxy: ENC[AES256_GCM,data:e09UIAn928uOf6asUaFSg0VDoeShWGyd1c5gF0O0nwVEk/1ldVvaIyWMcwk=,iv:FS+LAI0S5XOOQO4WVpNfEUIxYHGY1YT6mITh8FpSiZU=,tag:1eM6wN98D3Bz0XlikCu5Gg==,type:str] -sops: - age: - - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyBQYXJG - Z2xYL1IvY1V5RDA3MDZCMWpXWEFiOHovNllZRVB0TlVlN1pwdFg0CjlqN2ZsSzNq - VjhnMGpjT0lmSTk4NHV1aXNvYlJTUEFZTi81TWpVVVRFZWsKLS0tIGpmYUFsc0tM - MHFqNHdiMnFzUXp6WitBcUZmaTJoVHN4cGpucE9mQ25NVkUKz3MfVWhDdViyVW2k - 9EaCQbmTQoK3ilVKtG2KPynVXMaHVCg5NXtKqwdXwnHM5SaQIYONLNWGoj6B0Sz5 - jFUKPQ== - -----END AGE ENCRYPTED FILE----- - - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSBRQzhN - dDVuY1JJQzFjOHViaThSUU9ucUVlY1A0cS9aMWgydE1EN01VWlRFCml4N2pubVhv - ajlvOHp2SkdQM2xpMjBwd2dFbzN0b250Q2VMeVZTcUM3TW8KLS0tIFVySVVKQWR4 - QnFCNExIZEtZakwzekFORjRINlpSdjFYNDJyVDF4OUd0Nk0KhqX2zSNmS9iv5PmA - 0zgy/OnXxzVQ4tfht0jNyqw1BFLxgCoPL7UPguBhD0yEeD1SAnmOQfx5sIw4yOmp - MP3elw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1vd78txz0chk8sum3tceamg7u6enzcclh3vnpjswyrmarvmdmp46qdx7mqt - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWdmtVQWZQOUFjbVlIWXdL - UFBRNTNobWFuSGtRc0ViL2VpYVgzem1lY1hRClpOWmVZUXhIcDFnanZPa1R2V0Zj - Zi92T0JuamZIMlpSWDVMZnVJcmRoMzgKLS0tIFNrQTV4NloxUFY3cHlRd3VUVTFN - TUE1eG1QN3F0YjNIYXI0cURSWDRHemcKm/ATwZaK3inWv16CqxfNkYI4SuZUwxc3 - o6kuJgUr5AHy5LhFZebhBxJZPxlG20D4Ib4FD3kqrqXZyPy4I+0g6g== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-05T20:41:18Z" - mac: ENC[AES256_GCM,data:LPaVDxkZF3hlDIemauZpGngWspGzLINuhI4UIdP1+vP5gX0EBVhpZWty9wCSfJEeuU1ycKPJFAok0A3hgLbXQdjlvTxW/ba5g3hvVHEoyCXPrOPZiEK2EsFZRaM99tMOijBODVHkGhRY2O0sms0OLs+oQg6A+9fe14+dZxoUjWw=,iv:spAY8/Ghs8XhbNgKB8NQILC/qC8tBPiInnOOzfnuxZI=,tag:cLAmIvb4p0Sz2IIEk98/rg==,type:str] - unencrypted_suffix: _unencrypted - version: 3.9.4 -- cgit v1.3.1