parent
6a3d46c990
commit
c3605fe76c
2 changed files with 4 additions and 6 deletions
|
@ -1696,9 +1696,9 @@ sudo nix run nixpkgs#ipmitool -- raw 0x30 0x30 0x02 0xff 0x00
|
||||||
## user = "kanidm";
|
## user = "kanidm";
|
||||||
## };
|
## };
|
||||||
|
|
||||||
services.caddy.virtualHosts."idm.h.lyte.dev" = {
|
# services.caddy.virtualHosts."idm.h.lyte.dev" = {
|
||||||
extraConfig = ''reverse_proxy https://idm.h.lyte.dev:8443'';
|
# extraConfig = ''reverse_proxy https://idm.h.lyte.dev:8443'';
|
||||||
};
|
# };
|
||||||
|
|
||||||
networking = {
|
networking = {
|
||||||
extraHosts = ''
|
extraHosts = ''
|
||||||
|
@ -1977,7 +1977,6 @@ sudo nix run nixpkgs#ipmitool -- raw 0x30 0x30 0x02 0xff 0x00
|
||||||
/*
|
/*
|
||||||
TODO: non-root processes and services that access secrets need to be part of
|
TODO: non-root processes and services that access secrets need to be part of
|
||||||
the 'keys' group
|
the 'keys' group
|
||||||
maybe this will fix plausible?
|
|
||||||
|
|
||||||
systemd.services.some-service = {
|
systemd.services.some-service = {
|
||||||
serviceConfig.SupplementaryGroups = [ config.users.groups.keys.name ];
|
serviceConfig.SupplementaryGroups = [ config.users.groups.keys.name ];
|
||||||
|
|
|
@ -65,8 +65,7 @@ See [lib/internal.md](./lib/internal.md).
|
||||||
- gnome missing icons
|
- gnome missing icons
|
||||||
- ghostty only notify if window or pane or w/e is not focused
|
- ghostty only notify if window or pane or w/e is not focused
|
||||||
- more-easily manage gitea repo mirroring to github?
|
- more-easily manage gitea repo mirroring to github?
|
||||||
- router https://github.com/breakds/nixos-routers/blob/main/machines/welderhelper/router.nix
|
- a.lyte.dev for web analytics is down
|
||||||
- a.lyte.dev for web analytics
|
|
||||||
- grafana and stuff for monitoring
|
- grafana and stuff for monitoring
|
||||||
- alerts?
|
- alerts?
|
||||||
- Broot config?
|
- Broot config?
|
||||||
|
|
Loading…
Reference in a new issue