summaryrefslogtreecommitdiff
path: root/hosts/vidhar/firefly-iii
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2025-02-19 19:13:33 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2025-02-19 19:13:33 +0100
commite6d6685ea0e04a20a2558973c326749d5fba582a (patch)
tree40614ee5bf03a972fb6b1af164423730a4c9f31d /hosts/vidhar/firefly-iii
parentd05fb68b774b7011197c1c229e61809f642fcdd2 (diff)
downloadnixos-e6d6685ea0e04a20a2558973c326749d5fba582a.tar
nixos-e6d6685ea0e04a20a2558973c326749d5fba582a.tar.gz
nixos-e6d6685ea0e04a20a2558973c326749d5fba582a.tar.bz2
nixos-e6d6685ea0e04a20a2558973c326749d5fba582a.tar.xz
nixos-e6d6685ea0e04a20a2558973c326749d5fba582a.zip
Revert "firefly-iii"
This reverts commit c0616edd38161b81ec1624efba3f024b120ba4c6.
Diffstat (limited to 'hosts/vidhar/firefly-iii')
-rw-r--r--hosts/vidhar/firefly-iii/app_key24
-rw-r--r--hosts/vidhar/firefly-iii/default.nix64
2 files changed, 0 insertions, 88 deletions
diff --git a/hosts/vidhar/firefly-iii/app_key b/hosts/vidhar/firefly-iii/app_key
deleted file mode 100644
index b318b9c1..00000000
--- a/hosts/vidhar/firefly-iii/app_key
+++ /dev/null
@@ -1,24 +0,0 @@
1{
2 "data": "ENC[AES256_GCM,data:Z/u19vdnY5B76AaQCZOaXGRHTXiAaZ3OlnpEwehK40De6EoTzvs8BzC4/a6KVam5JDjcog==,iv:ZlCNcjQV1brRllTVdfFjhOcDe7sjHIRVbjs/dNT/w0o=,tag:bAtBraAy+i02pyVuhWoXBg==,type:str]",
3 "sops": {
4 "kms": null,
5 "gcp_kms": null,
6 "azure_kv": null,
7 "hc_vault": null,
8 "age": [
9 {
10 "recipient": "age1rmmhetcmllq0ahl5qznlr0eya2zdxwl9h6y5wnl97d2wtyx5t99sm2u866",
11 "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIZEZVVTZLU2VPQmM2Tjk3\nVEUvVitWRjdGRnE2Vm9FVjFhTk1IZ0g1bjJjCjd5dnZNd1VrTVc4QktRM0Z2aFdp\nVlRqLy9BMDV4VGI1SjdmWTFFVFZONG8KLS0tIHRYMGlpalZZUEJFU3c0Z0hXK1lQ\ndnFndWJmTTFjWVAzdkhwN0x6eHVHVmsKVls/ERf4ZfnTqryB6yt5OcjU42RlgAoD\nmMZzuEbhuGBApu2rEKlo4v/AKST6OVIlsiYr0na2W4vlmBOEs8OB1g==\n-----END AGE ENCRYPTED FILE-----\n"
12 },
13 {
14 "recipient": "age1qffdqvy9arld9zd5a5cylt0n98xhcns5shxhrhwjq5g4qa844ejselaa4l",
15 "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCcVVJZWNkMzlYc1lOMzlu\nai82RjhkZm5UYVplV0NNTjZlWm8zcmpCaW1BCnhMaGV5NFNkUUw5ODM5OVZZMUxO\nUUpVTGhtZDM4VzF3WXhTMFpHLytKUzAKLS0tIEZCSVFIODRhRDZuMzFFbSt1YlBI\ndldaZEd6dTBvU2huREhoQ3VNQ2NNdWMKyGuG1tzxIas5G6nlWRkgbxHTOGQ8cLx6\nOw83t98BBfWSZVTuUfHAemn5fPsjRUhsZvEuH70NvQXDRxSvV2nvww==\n-----END AGE ENCRYPTED FILE-----\n"
16 }
17 ],
18 "lastmodified": "2025-02-18T18:05:57Z",
19 "mac": "ENC[AES256_GCM,data:7rl6npBWEFeS+IZMLb2+jLcs1d5gSzZyGkCDcrpAbxAB7doAp4vh5DJUEFnAUMtN/iHlwjX71pRNjBHLlYqCs344aaGkcEVMDO/C2m8efuPq+qIi+z372PlM+ekVDXquthvc8fcPhsCWHyso1LTpDjMRqf6kizk0wEtwJj5kOWA=,iv:OEaeQUJ2f0XZidWkttC8Y+WAkDyNkViTNiiDgy5QKr8=,tag:ERsBlT0T3iZvoEWcRhTpPA==,type:str]",
20 "pgp": null,
21 "unencrypted_suffix": "_unencrypted",
22 "version": "3.9.4"
23 }
24} \ No newline at end of file
diff --git a/hosts/vidhar/firefly-iii/default.nix b/hosts/vidhar/firefly-iii/default.nix
deleted file mode 100644
index 026d4643..00000000
--- a/hosts/vidhar/firefly-iii/default.nix
+++ /dev/null
@@ -1,64 +0,0 @@
1{ config, ... }:
2{
3 config = {
4 services.postgresql = {
5 ensureDatabases = [ "firefly-iii" ];
6 ensureUsers = [
7 { name = "firefly-iii";
8 ensureDBOwnership = true;
9 }
10 ];
11 };
12
13 services.firefly-iii = {
14 enable = true;
15 enableNginx = true;
16 group = "firefly-iii";
17 virtualHost = "firefly.yggdrasil.li";
18 settings = {
19 DB_CONNECTION = "pgsql";
20 DB_DATABASE = "firefly-iii";
21 APP_KEY_FILE = config.sops.secrets."firefly-iii_app_key".path;
22 APP_URL = "https://${config.services.firefly-iii.virtualHost}";
23 };
24 };
25
26 services.nginx = {
27 commonHttpConfig = ''
28 map $http_x_forwarded_proto $fastcgi_param_https_variable {
29 default ''';
30 https 'on';
31 }
32 '';
33 virtualHosts.${config.services.firefly-iii.virtualHost} = {
34 listen = [
35 { addr = "[2a03:4000:52:ada:4:1::]"; port = 9000; }
36 ];
37 extraConfig = ''
38 set_real_ip_from 2a03:4000:52:ada:4::;
39 '';
40 locations."~ \\.php$" = {
41 extraConfig = ''
42 fastcgi_param HTTPS $fastcgi_param_https_variable;
43 '';
44 };
45 };
46 };
47
48 sops.secrets."firefly-iii_app_key" = {
49 format = "binary";
50 sopsFile = ./app_key;
51 group = config.services.firefly-iii.group;
52 mode = "0440";
53 restartUnits = [ "firefly-iii-setup.service" "firefly-iii-cron.service" "phpfpm-firefly-iii.service" ];
54 };
55
56 users.groups.${config.services.firefly-iii.group} = {};
57
58 systemd.services = {
59 nginx.serviceConfig.SupplementaryGroups = [ config.services.firefly-iii.group ];
60 "firefly-iii-setup".serviceConfig.ReadWritePaths = [ "/run/postgresql" ];
61 "firefly-iii-cron".serviceConfig.ReadWritePaths = [ "/run/postgresql" ];
62 };
63 };
64}