.gitea/workflows/deploy.yaml

@@ -11,8 +11,26 @@ jobs:
     name: build hive configuration
     runs-on: ubuntu-22.04
     steps:
-      - uses: cachix/install-nix-action@v31
       - uses: actions/checkout@v4
+      - uses: DeterminateSystems/nix-installer-action@main
+      - name: Restore and save Nix store
+        uses: nix-community/cache-nix-action@v6
+        with:
+          # restore and save a cache using this key
+          primary-key: nix-${{ runner.os }}-${{ hashFiles('**/*.nix', '**/flake.lock') }}
+          # if there's no cache hit, restore a cache by this prefix
+          restore-prefixes-first-match: nix-${{ runner.os }}-
+          # collect garbage until the Nix store size (in bytes) is at most this number
+          # before trying to save a new cache
+          # 1G = 1073741824
+          gc-max-store-size-linux: 1G
+          # do purge caches
+          purge: true
+          # purge all versions of the cache
+          purge-prefixes: nix-${{ runner.os }}-
+          # created more than this number of seconds ago
+          purge-created: 60000
+          purge-primary-key: never
       - name: Install SSH key
         uses: shimataro/ssh-key-action@v2
         with:

hosts/sin/configuration.nix

@@ -2,7 +2,6 @@
   modulesPath,
   lib,
   pkgs,
-  config,
   ...
 }:
 {
@@ -52,25 +51,18 @@
 
   time.timeZone = "Europe/Paris";
 
-  nix.settings.experimental-features = [
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
-    "nix-command"
-    "flakes"
-  ];
   nixpkgs.config.allowUnfree = true;
 
   users.users = {
     zimablade = {
       isNormalUser = true;
       extraGroups = [ "wheel" ];
-      openssh.authorizedKeys.keys = [
+      openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos" ];
-        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos"
-      ];
     };
     shobu = {
       isNormalUser = true;
-      openssh.authorizedKeys.keys = [
+      openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos" ];
-        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos"
-      ];
     };
   };
   
@@ -79,12 +71,10 @@
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos"
   ];
 
-  environment.systemPackages =
+  environment.systemPackages = map lib.lowPrio [
-    map lib.lowPrio [
     pkgs.curl
     pkgs.gitMinimal
-    ]
+  ] ++ (with pkgs; [
-    ++ (with pkgs; [
     helix
     httpie
     btop

hosts/sin/copyparty.nix

@@ -1,5 +1,4 @@
-{ inputs, pkgs, ... }:
+{inputs, pkgs, ...}: {
-{
   imports = [ inputs.copyparty.nixosModules.default ];
   nixpkgs.overlays = [ inputs.copyparty.overlays.default ];
   environment.systemPackages = [ pkgs.copyparty ];
@@ -12,9 +11,7 @@
       e2ts = true;
       z = true;
       qr = true;
-      xff-hdr = "X-Real-IP";
       xff-src = "lan";
-      rproxy = 1;
       http-only = true;
       og = true;
       shr = "/shares";

hosts/sin/ollama.nix

@@ -1,21 +0,0 @@
-{ inputs, ... }:
-{
-  # virtualisation.docker = {
-  #   enable = true;
-  #   storageDriver = "btrfs";
-  # };
-
-  services.ollama = {
-    enable = true;
-    openFirewall = true;
-    loadModels = [ ];
-    acceleration = "cuda";
-  };
-
-  services.open-webui = {
-    enable = true;
-    openFirewall = true;
-    host = "0.0.0.0";
-    port = 8050;
-  };
-}

hosts/thea/nginx.nix

@@ -1,16 +1,11 @@
-{ inputs, ... }:
+{inputs, ...}:
 let
   # striped-front = inputs.striped-front;
 
   sin-address = "192.168.1.14";
-in
+in {
-{
 
-  networking.firewall.allowedTCPPorts = [
+  networking.firewall.allowedTCPPorts = [ 80 443 8448 ];
-    80
-    443
-    8448
-  ];
 
   services.nginx = {
     enable = true;
@@ -110,9 +105,6 @@ in
 
           locations."/" = {
             proxyPass = "http://${sin-address}:8086";
-              extraConfig = ''
-                proxy_set_header X-Real-IP $remote_addr;
-              '';
           };
         };
         # "matrix.shobu.fr" = {