diff --git a/profiles/servers/cloudflare-ddns.nix b/profiles/servers/cloudflare-ddns.nix deleted file mode 100644 index fbf9615..0000000 --- a/profiles/servers/cloudflare-ddns.nix +++ /dev/null @@ -1,21 +0,0 @@ -{ config, lib, pkgs, ... }: -with config.users.users.alukard; with config.users.groups.${group}; { - secrets."cloudflare-ddns-ataraxiadev" = { - owner = "${toString uid}"; - # permissions = "400"; - }; - - virtualisation.oci-containers.containers.cloudflare-ddns = { - autoStart = true; - environment = { - PUID = toString uid; - PGID = toString gid; - }; - extraOptions = [ - "--network=host" - "--security-opt=no-new-privileges:true" - ]; - image = "timothyjmiller/cloudflare-ddns:latest"; - volumes = [ "${config.secrets.cloudflare-ddns-ataraxiadev.decrypted}:/config.json" ]; - }; -} \ No newline at end of file diff --git a/profiles/servers/coturn.nix b/profiles/servers/coturn.nix deleted file mode 100644 index b77cc89..0000000 --- a/profiles/servers/coturn.nix +++ /dev/null @@ -1,66 +0,0 @@ -{ config, pkgs, lib, ... }: { - secrets.turn-shared-secret = { - owner = "turnserver"; - }; - - services.coturn = rec { - enable = true; - no-cli = true; - no-tcp-relay = true; - min-port = 49152; - max-port = 49172; - use-auth-secret = true; - static-auth-secret-file = config.secrets.turn-shared-secret.decrypted; - realm = "turn.matrix.ataraxiadev.com"; - cert = "${config.security.acme.certs."ataraxiadev.com".directory}/fullchain.pem"; - pkey = "${config.security.acme.certs."ataraxiadev.com".directory}/privkey.pem"; - extraConfig = '' - external-ip=matrix.ataraxiadev.com - prod - user-quota=20 - total-quota=200 - #for debugging - # verbose - # allowed-peer-ip=10.0.0.1 - #ban private IP ranges - # no-multicast-peers - # denied-peer-ip=0.0.0.0-0.255.255.255 - # denied-peer-ip=10.0.0.0-10.255.255.255 - # denied-peer-ip=100.64.0.0-100.127.255.255 - # denied-peer-ip=127.0.0.0-127.255.255.255 - # denied-peer-ip=169.254.0.0-169.254.255.255 - # denied-peer-ip=172.16.0.0-172.31.255.255 - # denied-peer-ip=192.0.0.0-192.0.0.255 - # denied-peer-ip=192.0.2.0-192.0.2.255 - # denied-peer-ip=192.88.99.0-192.88.99.255 - # denied-peer-ip=192.168.0.0-192.168.255.255 - # denied-peer-ip=198.18.0.0-198.19.255.255 - # denied-peer-ip=198.51.100.0-198.51.100.255 - # denied-peer-ip=203.0.113.0-203.0.113.255 - # denied-peer-ip=240.0.0.0-255.255.255.255 - # denied-peer-ip=::1 - # denied-peer-ip=64:ff9b::-64:ff9b::ffff:ffff - # denied-peer-ip=::ffff:0.0.0.0-::ffff:255.255.255.255 - # denied-peer-ip=100::-100::ffff:ffff:ffff:ffff - # denied-peer-ip=2001::-2001:1ff:ffff:ffff:ffff:ffff:ffff:ffff - # denied-peer-ip=2002::-2002:ffff:ffff:ffff:ffff:ffff:ffff:ffff - # denied-peer-ip=fc00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff - # denied-peer-ip=fe80::-febf:ffff:ffff:ffff:ffff:ffff:ffff:ffff - ''; - }; - - users.users.turnserver.extraGroups = [ "acme" ]; - - networking.firewall = let - range = with config.services.coturn; [{ - from = min-port; - to = max-port; - }]; - in - { - allowedUDPPortRanges = range; - allowedUDPPorts = [ 3478 5349 ]; - allowedTCPPortRanges = range; - allowedTCPPorts = [ 3478 5349 ]; - }; -} \ No newline at end of file