move gitea to AMD-Workstation

2024-08-04 13:42:10 +03:00 · 2024-08-04 13:42:10 +03:00 · e9ceef976c
commit e9ceef976c
parent 0c46437a19
6 changed files with 127 additions and 74 deletions
--- a/machines/AMD-Workstation/default.nix
+++ b/machines/AMD-Workstation/default.nix
@ -21,6 +21,7 @@
    customProfiles.ccache

    customProfiles.acme
+    customProfiles.gitea
    customProfiles.media-stack
    customProfiles.tinyproxy
    ./nginx.nix
@ -28,6 +29,7 @@
  ];

  networking.extraHosts = ''
+    127.0.0.1 code.ataraxiadev.com
    127.0.0.1 jackett.ataraxiadev.com
    127.0.0.1 jellyfin.ataraxiadev.com
    127.0.0.1 kavita.ataraxiadev.com
--- a/machines/AMD-Workstation/nginx.nix
+++ b/machines/AMD-Workstation/nginx.nix
@ -61,6 +61,17 @@
          '' + proxySettings;
        };
      } // default;
+      "code.ataraxiadev.com" = {
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:6000";
+          extraConfig = proxySettings;
+        };
+      } // default;
+      "ataraxiadev.com" = {
+        extraConfig = ''
+          return 301 https://code.ataraxiadev.com$request_uri;
+        '';
+      } // default;
    };
  };

--- a/profiles/servers/gitea.nix
+++ b/profiles/servers/gitea.nix
@ -5,7 +5,7 @@ let
  runner-user = "gitea-runner";
  runner-group = "root";
  gitea-secret = {
-    sopsFile = inputs.self.secretsDir + /home-hypervisor/gitea.yaml;
+    sopsFile = inputs.self.secretsDir + /gitea.yaml;
    owner = gitea-user;
    restartUnits = [ "gitea.service" ];
  };
--- a/profiles/workspace/catppuccin/gitea.nix
+++ b/profiles/workspace/catppuccin/gitea.nix
@ -44,12 +44,12 @@ in {
            "forgejo-dark-tritanopia"
          ];
        };
-      in lib.mkForce builtins.concatStringsSep "," (
+      in lib.mkForce (builtins.concatStringsSep "," (
        builtinThemes.${gitea}
        ++ (map (name: lib.removePrefix "theme-" (lib.removeSuffix ".css" name)) (
          builtins.attrNames (builtins.readDir theme)
        ))
-      );
+      ));
    };
  };
 }
--- a/secrets/gitea.yaml
+++ b/secrets/gitea.yaml
@ -0,0 +1,111 @@
+gitea: ENC[AES256_GCM,data:J+ZBpsUSXOaPycPCjh6RgZQlRv8=,iv:DtE+qtWTIHS2OkFZBhUcjg07wVrwiMm7XsW63ZD4f5o=,tag:5vOIdgsBB8eMkIbRe6pNdA==,type:str]
+gitea-mailer: ENC[AES256_GCM,data:o7JNqMqJM3OoDxSohmeYsPn1n3wb6J6L,iv:agiJl0halqfmKMvWA8b0boXF3rXrbC2bIj9zb5274hg=,tag:DjnNySDnYwVYtP9RNuEYGQ==,type:str]
+gitea-secretkey: ENC[AES256_GCM,data:eyhy6wRwoWxUVGh3GghePwYZxX2BmHxly0Tn6eHq+6qDryDgL6c/fA==,iv:/xMqcni+lTh3syWSSp50pS6VHDTEDsUL2idFWEoCc9M=,tag:qgmGHzc5R6k6OLOEyrBlMw==,type:str]
+gitea-internaltoken: ENC[AES256_GCM,data:BYA9CHQ/IVnwA/apr0V3EYE66vJfz5wdpOGxgMzVdcYKrqVVhfK7YQ==,iv:Fj4gn00rRc2E1A74SWeRZWktm4EvvTeCG04p8K2NSxk=,tag:BanFYGL7GF5Q8zdjugAICw==,type:str]
+gitea-runner-hypervisor: ENC[AES256_GCM,data:vS++cR4ewTzT8W7h870tXJkFYy6F9hV8SA/A94kqIxsawAmeeu5xf5YVQZZcNw==,iv:h9LVb3J909tkoiI01mh7ZgW34MPrB49mC5Sn+b5iIQE=,tag:CJ9kk6Ly/X89VAU2pBOZaA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:08:51Z"
+    mac: ENC[AES256_GCM,data:ranW9+W0x11eRFRzGosVfapoW1xpgTUpUvzzItYcZT0Pr1cRpBMQNTmHXpItNKuw1Ut4PBzUlmtDl/Y1VlefVecy6j9xvEczgYvCXCRH+x5Dp2FAuIwqw+EuQWsxxZ/k32zzdWT2brWsO+z5EmLRePJu0mBoxRx1vqVAZef8vwo=,iv:yEofPQ22CpHLktUjRke1Tlg445TpX0ocpQBeoeWba+Q=,tag:Ai+tbYJJ5BHyNHfnK1elgw==,type:str]
+    pgp:
+        - created_at: "2024-07-18T13:59:27Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf/QSk4WajpkQlwJDmcAww1dFQjpGpBAj55nslbLG4fc0y3
+            ND30dJ8/98l1Au0t4FBmQ364text3IkcfPJu635dCgUhkuzq6U9wwaesmL8GPZDH
+            3IuiygJJaDlL0zITecwcYVXzp3SHvy+b/28MKBHPeQHUcAfVTbk0QhCRE/9pbX3M
+            5PMKjrl2y8sBk98oykjOFezEX+ykkjUSSrSFBuGw+HaDJseDqhuAuxYY86yYklpK
+            rO39O8kzeFwUm2VxW28yiO3Yd0gINvi0b6bNqMqruXdKXMalNxla1MBUOq9NPegG
+            S5Xwft1UeyDzXrtj6750BeXQ4GXWvI4AjKIegqV18tJYAd7qK87W6eZcvUlTfg9i
+            DxwVkQbwbAikdIbvvzEP9ShibdJl3uniM4yk5C1gSKFV7ZJQMJJbrURRBbuEcWb4
+            v7ICAmResSYG1lp6HIOmWeT9iPKULHO1Kg==
+            =ofgK
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-07-18T13:59:27Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA7DEqu/04FqmAQ/+ND7nCdGT4fzG0Hqa2W7jkTXaDK0R92fQzEtV2hZ0zIdG
+            MH/iwc1M/oV4wEvWv2Qp/sfC4wVFL3jysqnW7q3b3+VgRJuQWEFlv/WZUD5IxBgH
+            xgSTnxvQDuXeoQl+zF5MAFISioCbbFvuJuP2jK5I0xcccrxRYwVV1cnp+vMVG4So
+            etg01dpNONuFZBUIHCWTZk8vNLBLRmMoRQiJXa8PKoyKFCoY3NoRdwHhXNfXboO3
+            DSPtGf+BV31z3hMbYsj1lOA1iQHi1Cf40dI1DuuOO9Qe+LzvSyz+Kd5E5fgnpstO
+            3j5kzb1zahEaL6EBNLFMm6s4FzG5qUG6/LkHTlAkIhXWwn1QgBZfOpfXoss3bTsH
+            1aSTAunB5h7zgxncqYwkDwpAHZIY6RBfdoNp1U5zzTIjAgXVNbZa9M666YSj5Mo4
+            5DnAJdP79SCvVVo+xGjo457vm1PNxKV2l/TudcGyn78+ojYMQMY57CfVz8MgXpNU
+            I0ir1R1jLMZCRRCEThRy7vY5Rn68nWDMrkiyuJwybG1G5CS3xhfob5VcHIcB1ghT
+            mfIsLPKPoiodvuccA27MDFARsdfTPIRagjWAuFwqMAmaACAJuzhd0WvnKjUS62SR
+            FYjJ55uEvxYFSZSpkw2NpvZ6vcqeNXReJkNo249/O17CoC+70gjo7Gv07PZ1jWrS
+            WAGR0NiGe2NziOPo6Ikode5eaOdf+nPbY02+u6CGpyLRv5iE30KVrOWj/pw4iVfc
+            jRuwYhtbtoNc5lRpCN+vvjE7WFgdFA9U2WKqXouDMsmMmwgFNqbC3S0=
+            =BaUn
+            -----END PGP MESSAGE-----
+          fp: 4ec141b4dd5a00e108b36211b0c4aaeff4e05aa6
+        - created_at: "2024-07-18T13:59:27Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ/7BgY+MJ13bpIFB5ErF5b3PBpwb36mukIHKxDsug/EAjFQ
+            aHrCtmASV4bFYIbzMN/iOHNGnHoeUrfo7REcVWJJ0ts6gEPnTLLEmc7Sb8G9r7lg
+            C+RvanDDs8RV6dJakuFFzufZmDPrRUAijgD4Ps2MeVLo8v4NxYBCd24PRS5A8Ywc
+            Qzj6tt0m+0rNEVcPhtR27PVqpSL71LHfFJrR06mK5nT2mqyIQU9ABAa8YYeaKZdL
+            PyAERVXKXAHX2862Rgd9Pfj3YH7RNKyroafCF+pAm08kd+8IC9OyRUrnfkPruJDC
+            alSo0aq0BWsDXl3l62BVbqRmyS8o/ngAIDFqYp463aG8axBJNnRU63gipXQicnhO
+            mPUdTrbi0GhwWDHDuKfwwjdjW/3gjoJJ0Np4dws5EhE/m6dzMV4flCYKmGHoAu0B
+            SdHcrcdMKpACRxqkWLRfLZft/467udgP0e2e1ic0JzaNi2VwmD/JXf9RlsVcw1Ut
+            iVfpWaTSs3Plta1tEYyybnVJBsUFpJsyAcWwEq2ieAeD9mXE80Zbf5TPvQoTPOL0
+            Q7VlXfKulVtld0v7V0w0RbXiozM8sAoR/nmBbMYJsse9AYC97ey74M3oYPgBs1qr
+            5i/NCHixI4+4mRXBaUszOiPGcCzXDbvrt/QvGuz28lpiaOaIvs+D8pSmcOK8fL7S
+            WAFNZrdtRf2r7ajer276rSEH70ACyXmU2Pt7dMUNTxEVfaStvXokSkzWdirQ7+2C
+            cuxjn+WFdkqTyV4bmpP8cd8gf5hXAMJgBYx/YflqL6rAjHHlU+S9N3g=
+            =84Oc
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+        - created_at: "2024-07-18T13:59:27Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4NImSg+4iqHAQ/+PaguSKhG6iXqvpXGurT8o9qFgS1+IqbpN236PUfFemCw
+            lZMm1vQkEr1QhK92yhuAbs/lb1OWYdYHrAFpAaI2J3ldN+Y0RGfkDbepGGDTWuZr
+            RDGvbdsrbYmBHKh42fAz68wDYmBoQ6qVQTMQn2bAwjPyzUafI6Gp/rOteOL+PtGW
+            7n2sEgqhYypw1jUm0pEu1I4pyFG8zCtC8iew/zYFIIK+MxXci3K4+QfQLRfAkclW
+            62j17hlra2lb2z/I/b8+lVPqrUjjgD8lpqhzecN+XmljWsgJFvTY9jC3abqQaGQr
+            V7YcdU3IQyNpdewYuNNbRr8juLqvzh+isDeUGzMiTIKLH0uJydRJWQDJ03pDcn5c
+            8TBqGWo2DdvRGDq5q6Eg8iaU1BgYxnbwkDLuRg4tZHBR1AXW7aH3QyzwdS5s01PI
+            yNbSZW9Q0IEll+dgJdILiAj72fQXRTOyr8TxYbbBsBhLt97NWIGda1Dm3mZXm5/H
+            RHIqktawJMdmjG+bQ+pU0P4a2L4FiGcU5Q6QpTR4CBfAHwxyXfnHKTC5qBskaDSY
+            mc4zcT9CqHJK+l17toWEgmc6yAz5TgEnrbSChV9HhUGNYz5+CjKg249vydCIIaB9
+            92E+/O1I6kLb8K0NpEhLgpTz2jzRD8XljZOxPCJU1VJ1z7i51BsXNlJ2yBlPs93S
+            WAFrVP+XiEiorUmR//2mjfJZz0XABfTT7lIVfYyvMGaIfLfqJpc5rrqQBvo1w3OH
+            xjebxpnUc5pIhydyO4QvYh0PUclHT1be/WOH+tEb2hjCCddMZpdgEsg=
+            =i5bl
+            -----END PGP MESSAGE-----
+          fp: 78fa8fb95e85b2b89f1dd4f0834899283ee22a87
+        - created_at: "2024-07-18T13:59:27Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9T+KNkhS2haARAAgQtfI+5L+UUlWS1BgO6LYTEQx5hxarwNL0wvU/dqYKJs
+            CUZQOKWfsiKTCsGHg8AUjlsjHKs2aZVxQzy40dfUJ75hPyFBG4pOl74lTnZ8JX9r
+            NG2W6JcYhvTkVPulkYnT6JUFa5gMWQM13+93Yvp93+2s3CDLbqgky83SrNdrkMFG
+            FZ4EBgDrs0Q76DA4EuSPaaMhqihVijWOXZy3gKO7N4cEpd1Q677Uab2ROr4sbKub
+            JuSyHzugl3wMvQhVbS5KQP2wLFMmqbCWmUIJng6MqXeVnl0c/CRXWQmjNSTX35YR
+            uLCUwkMFIiVlV99VtX0pARXQzlezRTWlzMTYQ8PciYOUON8xA1VSpZ7b2obHfGfZ
+            J2edKa3cFEGC3S3ZPs4A50VGjEu3s8C9XkFUzasG3t70imFQw+OgG7fitIeQPNT+
+            mcEOKAJ6nm8cS1+p+aRWHhUMuH+8Gs3ndNZZyniuQ8BOlG3D78gSL0MQvIktZ9ya
+            5/Aw8CB+2p4PQrOsbEoEvTGcgAG+TJQafDVja38qEj+Nxg3nxLGx2qmJ1IL1pae/
+            JWpFsDvYuH/R29bNoCLesX4nRLtYbK1XiIc4xLJgAkwmmbLbYWHlKKm9Y1DQYWEv
+            pKMod4TbStUFKcPxCcf2vFgLK2m2hrSpSy7LImiF0wbxTIIPBlBdYFaHqHyvDR3S
+            WAEvTxCk+DnbrZhXqMoM+KMrmuhskFZslaqtGUR9UjcmSG84MnWioTMGj0dBNpt+
+            RsXT61ARhJ8zm7K8NgUEq2HM900T0e2Efaestw/L/MCHDcbVH+gUTH0=
+            =6Tz3
+            -----END PGP MESSAGE-----
+          fp: 05588f4245256f75a8da42e5d4fe28d9214b685a
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/gitea.yaml
+++ b/secrets/home-hypervisor/gitea.yaml
@ -1,71 +0,0 @@
-gitea: ENC[AES256_GCM,data:J+ZBpsUSXOaPycPCjh6RgZQlRv8=,iv:DtE+qtWTIHS2OkFZBhUcjg07wVrwiMm7XsW63ZD4f5o=,tag:5vOIdgsBB8eMkIbRe6pNdA==,type:str]
-gitea-mailer: ENC[AES256_GCM,data:o7JNqMqJM3OoDxSohmeYsPn1n3wb6J6L,iv:agiJl0halqfmKMvWA8b0boXF3rXrbC2bIj9zb5274hg=,tag:DjnNySDnYwVYtP9RNuEYGQ==,type:str]
-gitea-secretkey: ENC[AES256_GCM,data:eyhy6wRwoWxUVGh3GghePwYZxX2BmHxly0Tn6eHq+6qDryDgL6c/fA==,iv:/xMqcni+lTh3syWSSp50pS6VHDTEDsUL2idFWEoCc9M=,tag:qgmGHzc5R6k6OLOEyrBlMw==,type:str]
-gitea-internaltoken: ENC[AES256_GCM,data:BYA9CHQ/IVnwA/apr0V3EYE66vJfz5wdpOGxgMzVdcYKrqVVhfK7YQ==,iv:Fj4gn00rRc2E1A74SWeRZWktm4EvvTeCG04p8K2NSxk=,tag:BanFYGL7GF5Q8zdjugAICw==,type:str]
-gitea-runner-hypervisor: ENC[AES256_GCM,data:vS++cR4ewTzT8W7h870tXJkFYy6F9hV8SA/A94kqIxsawAmeeu5xf5YVQZZcNw==,iv:h9LVb3J909tkoiI01mh7ZgW34MPrB49mC5Sn+b5iIQE=,tag:CJ9kk6Ly/X89VAU2pBOZaA==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age: []
-    lastmodified: "2024-01-21T19:08:51Z"
-    mac: ENC[AES256_GCM,data:ranW9+W0x11eRFRzGosVfapoW1xpgTUpUvzzItYcZT0Pr1cRpBMQNTmHXpItNKuw1Ut4PBzUlmtDl/Y1VlefVecy6j9xvEczgYvCXCRH+x5Dp2FAuIwqw+EuQWsxxZ/k32zzdWT2brWsO+z5EmLRePJu0mBoxRx1vqVAZef8vwo=,iv:yEofPQ22CpHLktUjRke1Tlg445TpX0ocpQBeoeWba+Q=,tag:Ai+tbYJJ5BHyNHfnK1elgw==,type:str]
-    pgp:
-        - created_at: "2024-07-17T08:44:37Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQEMAwcagTG/Fm6AAQf/Yz31hUhq5UaDwE3mJqmphBCu6lrKKfs8LZ5qQaxOms9R
-            rmXrGVCgmKzjnbRg9UDp4OJ/Ksa6Kt+kMYZ/+eAbtyBdcpFylzWTnnG5aBJDGXJ3
-            w3sQxnS1B77Ozle3xduLFV+OhQT7mdekY+/5/457i8nRs+iCZOOpTNmPQ2N8mM55
-            PRQ7sAe1kFyfNxX1gvRJ8KFgquBR7paIWx6qF38Q/R5qE2CbabCVxdX4DBqZtINC
-            S3RvEgXd1BrASn4I7MSPBojlbXVlCxQ9sm/oomAYUydKdRggZdswyikAvzAV/9V4
-            4vBO/46rPdtD26c4UQbEJe+zqCIoRHrMtFt3kfMFlNJYAXVoodmOiL4OcligPt+8
-            4exgbotmgMgQp9wz/afRHVnRc7bj6mOaYzMnRNG8qJj2ydwtJchmht1bc7xQC6S7
-            N9QJUoQDAu4/xIWTFWPs45/L3JHu7nzDdA==
-            =DJbk
-            -----END PGP MESSAGE-----
-          fp: ad382d058c964607b7bbf01b071a8131bf166e80
-        - created_at: "2024-07-17T08:44:37Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA187ia82lSDGARAAyDF/sRGs95lxNX0WdnZlgwSHh8d59eanPdmP6pGaUK5f
-            EGEZg8p+JvI5JvN6xaAxgMKPYcTv/Z6Mv2mXS7/jyGrpVQBbPJVc3vQVGcY0LbHe
-            1LJme1XBFfsSC/2BVv3Py5o/W4Cw/Mv216DCiKxwP+30fpMOJ/saZju9Orq32PVL
-            xmKyxw4jM46WD18tfZcinArUs++G7uqe3Izz4IFSpHLAEJNrMsowLl6yoYjHtHqg
-            ks0fCXRVqdQsv6E4n/ys7WFj/y9fusS0bl1pe6ZS8zNV5z1rPWRUyPiqpm5p+mbu
-            U0x2X5bWmALN8tC+JdTF/QtLKt9JxpytEdI3+EDxM80FZ250OWFNDPswp/ggTiQP
-            w3FKZH+IJu8zTesUxEVh9VDb+kdKsYsKxD/l5iiv/XIKpGwODIyw62DBtWKs6AeT
-            A6/gVI4xVvGk+Eh+ycNhatRY/Z/8TyjkzsYdaXNlDE5iSPZGm8pBmM+6BMYWA14S
-            P9vWEq1Xl6tnyS4MBPnBethAXXUhzXj+yTTIRrkfGWtWo6y4rlXCX7YO1sog7Eo1
-            +6dX97gmrHUK0JXY5+ptTzX7zgwvRZXcWlvXyJWBNUg6L22xyoEp1tcamXTOv3z4
-            wJnokirSmh7Da/lKmTjaG6jxqpq4yDPEn4iA8rGP/B2bq4G8k4xexDsBiPdd/ZzS
-            WAEpndzl1l+vNiBuneGrLwI3Ndv1ncHpXqDuGPABzuHUrSfpmFgCD2BAi65VFbDI
-            J91U9I+PQyPixluCBsvxNGSgksURsSHvMGED896jXPnd3LtKUWNMM+Y=
-            =tg4r
-            -----END PGP MESSAGE-----
-          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
-        - created_at: "2024-07-17T08:44:37Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7DEqu/04FqmAQ/9EpPt1mtQUkpfBY96xfkW1FV/QA6DproidqmlUMMxkbkG
-            p07A740HicHQdSOknYp50hmBnRqoEkko2Mi5xeZRYq4A4OlDK7HsWjKOyMZwfs2y
-            wvJ6ijbyTlxXe2kwOfnFTeCvk8wSp6UaTNth+i0p1+RzQfm/z0cYf0x0MK7ZSX9F
-            Fv00lZ/H73IYOsIeEJmDperRLPHW3pRRH/intxWqKxBzQBDb1HEbr6zK/+Jz/t8G
-            /5rgPi1r1fssbvqWb9qw+Z0hBaxrlY70PLQ1MTmSwDg0qoes2tWuaXinI8cib2af
-            jEWBSntAQUVUwLKh7Gw5X1LlXTHnEYhPVc7AGxXIULxgmgu2WtdRby7GIm8k0mss
-            IC08RKj1R3JEMy8W2fKeY+D5B+NMShCByvmNqdn1pwafVfNhv6zazKCllOTGapsm
-            njp3RquCQOnztpaYdIGHNf5y+c0xfFo4Kwj9J2ffDuWH17xmtxGQvbxbQtjH25IB
-            LKZbxpqsvhhq1qIVbABPZWgAzA8hC8Z3wOYAsQUEjGf20DS1sw97Fc0wKCtRbWUd
-            9ehQPW7iKlleyJIlW0IG9k2S7dVnDc47l2ZQazHNCyzA4BfF1cncuD5/tTFP0qEi
-            C5FzxDCIl9R58RUdfHQDrwT/9vNCl029aW93DmRULxl/Y/IbUVsoC4na2Jb/J3nS
-            WAFBf1kmdXODQ1IxtVWsY4lWAQ1znnAlaxZfrYIt8wy3dM6wmlHUiyta9V/7MTCq
-            VL2t6v+z0WmxV7zc5NInR+21JaGq6UWynJ5Vrh4JzEPcErmVqUdPbX0=
-            =C8DG
-            -----END PGP MESSAGE-----
-          fp: 4ec141b4dd5a00e108b36211b0c4aaeff4e05aa6
-    unencrypted_suffix: _unencrypted
-    version: 3.8.1