diff --git a/hosts/prefect/default.nix b/hosts/prefect/default.nix index 90134be1..cf4d1a42 100644 --- a/hosts/prefect/default.nix +++ b/hosts/prefect/default.nix @@ -22,18 +22,12 @@ # Running Services ./services/acme.nix - # ./services/blog-update.nix ./services/caddy.nix - # ./services/dn42-peerfinder.nix ./services/fail2ban.nix - # ./services/headscale.nix ./services/mailserver - # ./services/netdata.nix - # ./services/nginx ./services/prometheus.nix ./services/secrets.nix ./services/tailscale.nix - # ./services/zerotier.nix ]; fileSystems = { "/" = { diff --git a/hosts/prefect/services/blog-update.nix b/hosts/prefect/services/blog-update.nix deleted file mode 100644 index 7606e9ce..00000000 --- a/hosts/prefect/services/blog-update.nix +++ /dev/null @@ -1,30 +0,0 @@ -{ pkgs, lib, ... }: -{ - systemd.timers.blog-update = { - enable = false; - after = [ "network.target" ]; - wantedBy = [ "multi-user.target" ]; - description = "Blog Update Timer"; - timerConfig = { - Unit = "blog-update.service"; - OnUnitActiveSec = 300; - }; - }; - - systemd.services.blog-update = { - enable = false; - wantedBy = [ "multi-user.target" ]; - description = "Blog Update Service"; - path = [ - "${pkgs.git}" - ]; - serviceConfig = { - WorkingDirectory = "/var/www/blog"; - User = "caddy"; - Group = "caddy"; - Type = "oneshot"; - ExecStartPre = "${lib.getExe pkgs.git} fetch origin pages"; - ExecStart = "${lib.getExe pkgs.git} reset --hard origin/pages"; - }; - }; -} diff --git a/hosts/prefect/services/blog-update.sh b/hosts/prefect/services/blog-update.sh deleted file mode 100644 index 6bd7808f..00000000 --- a/hosts/prefect/services/blog-update.sh +++ /dev/null @@ -1,5 +0,0 @@ -node scripts/precommit.js -node scripts/predeploy.js -hugo -d out -cp -fvr out/ /var/www/blog/ -exit 0 diff --git a/hosts/prefect/services/dn42-peerfinder.nix b/hosts/prefect/services/dn42-peerfinder.nix deleted file mode 100644 index ea7eda90..00000000 --- a/hosts/prefect/services/dn42-peerfinder.nix +++ /dev/null @@ -1,4 +0,0 @@ -{ config, ... }: -{ - config.py.services.dn42-pingfinder.uuidFile = config.age.secrets.dn42-peerfinder-uuid.path; -} diff --git a/hosts/prefect/services/netdata.nix b/hosts/prefect/services/netdata.nix deleted file mode 100644 index 2b99fe2b..00000000 --- a/hosts/prefect/services/netdata.nix +++ /dev/null @@ -1,7 +0,0 @@ -{ - services.netdata = { - enable = true; - python.enable = true; - enableAnalyticsReporting = false; - }; -} diff --git a/hosts/prefect/services/nginx/default.nix b/hosts/prefect/services/nginx/default.nix deleted file mode 100644 index 8df98c99..00000000 --- a/hosts/prefect/services/nginx/default.nix +++ /dev/null @@ -1,38 +0,0 @@ -{ lib, ... }: -{ - services.nginx = { - enable = true; - additionalModules = [ ]; - recommendedOptimisation = true; - recommendedTlsSettings = true; - recommendedGzipSettings = true; - recommendedProxySettings = true; - virtualHosts = lib.mkForce { }; - streamConfig = '' - server { - listen 34197 udp; - proxy_pass 100.123.15.72:34197; - proxy_responses 0; - } - ''; - appendHttpConfig = '' - # Add X-Frame-Options to prevent clickjacking - add_header X-Frame-Options SAMEORIGIN; - - # Prevent mime type sniffing - add_header X-Content-Type-Options nosniff; - - # Never send Referer header - add_header Referrer-Policy no-referrer; - - # Require CORS or CORP headers for cross-origin resources - add_header Cross-Origin-Embedder-Policy require-corp; - - # Keep our own Browsing Context Group - add_header Cross-Origin-Opener-Policy same-origin; - - # Sites that require CORP will not load my assets - add_header Cross-Origin-Resource-Policy same-origin; - ''; - }; -} diff --git a/hosts/prefect/services/nginx/pyrox.dev.nix b/hosts/prefect/services/nginx/pyrox.dev.nix deleted file mode 100644 index ffcd4415..00000000 --- a/hosts/prefect/services/nginx/pyrox.dev.nix +++ /dev/null @@ -1 +0,0 @@ -{ } diff --git a/hosts/prefect/services/zerotier.nix b/hosts/prefect/services/zerotier.nix deleted file mode 100644 index a715c5d6..00000000 --- a/hosts/prefect/services/zerotier.nix +++ /dev/null @@ -1,6 +0,0 @@ -{ - services.zerotierone = { - enable = true; - joinNetworks = [ "a84ac5c10a3b1d69" ]; - }; -}