This repository has no description
2.1 kB
65 lines
1{ config, pkgs, ... }:
2{
3 krebs.sync-containers3.containers.ubik = {
4 sshKey = config.clan.core.vars.generators.ubik-container.files."ubik.sync.key".path;
5 startCommand = ''
6 export PATH=$PATH:${pkgs.git}/bin
7 until ${pkgs.dig.host}/bin/host github.com; do sleep 1; done
8 ${pkgs.nixos-rebuild}/bin/nixos-rebuild --refresh --flake github:lassulus/superconfig#ubik switch --no-write-lock-file
9 '';
10 };
11 clan.core.vars.generators.ubik-container = {
12 files."ubik.sync.key" = { };
13 migrateFact = "ubik-container";
14 prompts.warn = {
15 description = "copy or reference the secret key from the container into here, so we can actually start/sync the container";
16 type = "hidden";
17 };
18 };
19 containers.ubik.bindMounts."/var/lib" = {
20 hostPath = "/var/lib/sync-containers3/ubik/state";
21 isReadOnly = false;
22 };
23 containers.ubik.bindMounts."/var/lib/nextcloud/data" = {
24 hostPath = "/var/ubik";
25 isReadOnly = false;
26 };
27 # services.nginx.virtualHosts."c.apanowicz.de" = {
28 # enableACME = true;
29 # acmeFallbackHost = "ubik.r";
30 # forceSSL = true;
31 # locations."/" = {
32 # recommendedProxySettings = true;
33 # proxyWebsockets = true;
34 # proxyPass = "https://ubik.r";
35 # extraConfig = ''
36 # client_max_body_size 9001M;
37 # # fix abort after 1GB download
38 # # https://trac.nginx.org/nginx/ticket/1472
39 # proxy_max_temp_file_size 0;
40 # '';
41 # };
42 # };
43 # services.nginx.virtualHosts."mail.ubikmedia.eu" = {
44 # enableACME = true;
45 # forceSSL = true;
46 # acmeFallbackHost = "ubik.r";
47 # locations."/" = {
48 # recommendedProxySettings = true;
49 # proxyWebsockets = true;
50 # proxyPass = "https://ubik.r";
51 # };
52 # };
53
54 services.nginx.virtualHosts."karlaskop.de" = {
55 serverAliases = [ "www.karlaskop.de" ];
56 enableACME = true;
57 forceSSL = true;
58 acmeFallbackHost = "prism.r";
59 locations."/" = {
60 recommendedProxySettings = true;
61 proxyWebsockets = true;
62 proxyPass = "https://prism.r";
63 };
64 };
65}