diff --git a/hosts/homeserver/configuration.nix b/hosts/homeserver/configuration.nix index 23aeed8..d2f91d4 100644 --- a/hosts/homeserver/configuration.nix +++ b/hosts/homeserver/configuration.nix @@ -10,6 +10,7 @@ ./hardware-configuration.nix ./services/homeassistant.nix ./services/taskline.nix + ./services/newt.nix ]; # Bootloader. diff --git a/hosts/homeserver/secrets.yaml b/hosts/homeserver/secrets.yaml index 1accc95..3601d84 100644 --- a/hosts/homeserver/secrets.yaml +++ b/hosts/homeserver/secrets.yaml @@ -13,6 +13,10 @@ api_webpush_private_key: ENC[AES256_GCM,data:HtoRT9s8hCeivQjS2qZVt9D4mntXxVtbsBS api_auth_api_base: ENC[AES256_GCM,data:RzFnwSpzTE5ohClHuaUey4m97rIRbBOvH7Xc7Q==,iv:uoDhhixQsfVHkcn4yJzNhPQD8VdpaCLJmdVQhsf4MXU=,tag:nn5XE4UXEauosZYx9Lz2Tg==,type:str] api_self_api_base: ENC[AES256_GCM,data:eLIfeTUTXbwmwF165AP87kSIn6voQ5I/CZ7CPQ==,iv:7Zqw2adgRD1pRGciklrXpavV2eYwP7Wzy9TfJlm9kTk=,tag:0opGSZqtkm5EGcrhyy//9Q==,type:str] api_database_url: ENC[AES256_GCM,data:hqlt0OUn7MInJzCGN9bEOuflu6LQ/WCwVSAGVgS/LrakxD4NZ1c=,iv:ra+UE1BgPA/6LurbfW5st9Sm1Hrhe1wZy8PIHztYww0=,tag:+DcIGAvJfMmBp7Wui64JiA==,type:str] +#ENC[AES256_GCM,data:yCD7jho=,iv:nAFrzYfnAfiLJRKCQ+jK51SG9IaJDBhnFMFBd1h8EE4=,tag:PTmqwkJsEyUs4muWrecH4A==,type:comment] +panglin_endpoint: ENC[AES256_GCM,data:uP4LGElLH7Tk/RUm/dYk/AD9gzzXczPPKtb1FA==,iv:uVSX3KjQkOexu/e1tmZoUDBlhjwQVUVmpIl6PeK4lu0=,tag:qLpoFXJCnO4JjMyYdCMnoA==,type:str] +newt_id: ENC[AES256_GCM,data:BT6BpUWzJ39OpHnhKt5Y,iv:qSy1GiZP9m7MXw3HlYOHHCWxmmifLVW/pk4TjvF25M4=,tag:c5huZ4PodKlZmz1bk/MpmQ==,type:str] +newt_secret: ENC[AES256_GCM,data:qLaeYhO6bt0tSJAwNhwSMxIr416Od4AksSg5XZ7X7gy5+VpsLKNMg2v9XmMMhxs8,iv:L56pg4smT0D7Jm+KWq7BAXueYpHNGDjyD150lZYOwMw=,tag:ssgaGQsglXX2P+bBt2iQLQ==,type:str] sops: age: - enc: | @@ -24,7 +28,7 @@ sops: ymzV/vprvtzMGSPZLLwURHKO8PZBZ7VV8zL/wGSxFcposVnLwo5qFQ== -----END AGE ENCRYPTED FILE----- recipient: age185ejn50rqg7tnzcrkp5f9w7p6vf4ex3k9k472xlyvpenanrgnv4q6kyx9n - lastmodified: "2026-06-10T15:00:31Z" - mac: ENC[AES256_GCM,data:xiFrEfp3hOf0cGUgOklQ6rFLtU9XgMmFDqoHERloEzQDvnUk5nKqcDE4uwcQgoM/o2SMQXgw+inTgV9K4ofXto9uIg0zxmYhfQ2wUnGvI/9qIrXlrpaI/qdQGSkrv/4JvSQb0IspLb83gaxfYTH46lIUkMuPyLndbr3MlpRHAd8=,iv:ulHOTsbGMKUbJrAxEdG30ycd+UURmCbQ+6p37/68SDc=,tag:t2JvImsDHNREZxd+fMRg3g==,type:str] + lastmodified: "2026-06-11T16:48:44Z" + mac: ENC[AES256_GCM,data:f0sxtb1SW2oz0notsdj3i/3BpZ3hBtqFCC+H9v/Tg64KGqx0QQFYQY2w2W+l6oo1jUbOmRfWhTelWv/NcNJShCFoi/zD9Tb65LzVoCqbbB+JyfPVcgsN9JcDq8P+z/hfu0n+7sKniYUu0QSKUBpvjkD+G6gbZ6YaQNeKs/WnQ0c=,iv:lNr83IJy6O7tTSvKkrhceW2iL3Fgx8obYmLYU6cLobs=,tag:w41pjZXpkN9MsvKSKd5zAg==,type:str] unencrypted_suffix: _unencrypted version: 3.13.1 diff --git a/hosts/homeserver/services/newt.compose.yml b/hosts/homeserver/services/newt.compose.yml new file mode 100644 index 0000000..e08d7e6 --- /dev/null +++ b/hosts/homeserver/services/newt.compose.yml @@ -0,0 +1,8 @@ +services: + newt: + image: fosrl/newt:1.13 + container_name: newt + restart: unless-stopped + env_file: + - /run/secrets/rendered/newt.env + network_mode: host diff --git a/hosts/homeserver/services/newt.nix b/hosts/homeserver/services/newt.nix new file mode 100644 index 0000000..64fdefc --- /dev/null +++ b/hosts/homeserver/services/newt.nix @@ -0,0 +1,15 @@ +{ config, ... }: +{ + sops.secrets = { + panglin_endpoint = {}; + newt_id = {}; + newt_secret = {}; + }; + + sops.templates."newt.env".content = '' + PANGOLIN_ENDPOINT=${config.sops.placeholder.panglin_endpoint} + + NEWT_ID=${config.sops.placeholder.newt_id} + NEWT_SECRET=${config.sops.placeholder.newt_secret} + ''; +} diff --git a/hosts/homeserver/services/taskline.compose.yml b/hosts/homeserver/services/taskline.compose.yml index 9bb9d14..73238f5 100644 --- a/hosts/homeserver/services/taskline.compose.yml +++ b/hosts/homeserver/services/taskline.compose.yml @@ -1,6 +1,6 @@ services: nuxt: - image: atcr.io/tobinio.dev/task-line/nuxt:v2.4.0 + image: atcr.io/tobinio.dev/task-line/nuxt:v2.4.1 restart: always ports: - "3003:3000" @@ -9,7 +9,7 @@ services: volumes: - /srv/apps/taskline/data:/app/.data api: - image: atcr.io/tobinio.dev/task-line/api:v2.4.0 + image: atcr.io/tobinio.dev/task-line/api:v2.4.1 restart: always ports: - "3001:8080"