bertof/nix-dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fixup! WIP - Freya: MinIO

Browse source
This commit is contained in:
Filippo Berto 2024-05-18 15:26:31 +02:00
parent b953d8ef04
commit fbc936d604
Signed by: bertof
GPG key ID: 9DBF7E6A1D2CE9ED
3 changed files with 12 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

1
flake.nix
View file

@ -220,6 +220,7 @@
./modules/nixos/users/tiziano.nix ./modules/nixos/users/tiziano.nix
./modules/nixos/torrentbox.nix ./modules/nixos/torrentbox.nix
./modules/nixos/minio.nix
./modules/nixos/nextcloud.nix ./modules/nixos/nextcloud.nix
./modules/nixos/ntfy.nix ./modules/nixos/ntfy.nix
] ++ homeManagerModules ++ [ ] ++ homeManagerModules ++ [

12
instances/freya/configuration.nix
View file

@ -6,7 +6,6 @@ in
age.secrets = { age.secrets = {
ntfy-freya = { file = ../../secrets/ntfy-freya.age; owner = "bertof"; }; ntfy-freya = { file = ../../secrets/ntfy-freya.age; owner = "bertof"; };
minio = { file = ../../secrets/minio.age; owner = "minio"; };
}; };
console = { font = "Lat2-Terminus16"; keyMap = "it"; }; console = { font = "Lat2-Terminus16"; keyMap = "it"; };
@ -84,17 +83,6 @@ in
# desktopManager.retroarch = { enable = true; package = pkgs.retroarchFull; }; # desktopManager.retroarch = { enable = true; package = pkgs.retroarchFull; };
# }; # };
minio = {
enable = true;
dataDir = [
# "/var/lib/minio/data"
"/mnt/raid/minio/data"
];
rootCredentialsFile = config.age.secrets.minio.path;
};
fail2ban = { enable = true; bantime-increment.enable = true; }; fail2ban = { enable = true; bantime-increment.enable = true; };
plex = { enable = true; openFirewall = true; group = "users"; }; plex = { enable = true; openFirewall = true; group = "users"; };
jellyfin = { enable = true; openFirewall = true; group = "users"; }; jellyfin = { enable = true; openFirewall = true; group = "users"; };

19
modules/nixos/minio.nix
View file

@ -1,13 +1,16 @@
{ { config, lib, ... }: {
networking.firewall.allowedTCPPorts = [ age.secrets.minio = { file = ../../secrets/minio.age; owner = "minio"; };
9000
9001
];
services.minio = { services.minio = {
enable = true; enable = true;
browser = true; dataDir = [
listenAddress = "0.0.0.0:9000"; # "/var/lib/minio/data"
consoleAddress = "0.0.0.0:9001"; "/mnt/raid/minio/data/"
];
rootCredentialsFile = config.age.secrets.minio.path;
}; };
systemd.services.minio.serviceConfig.ExecStart =
let cfg = config.services.minio; in
lib.mkForce "${cfg.package}/bin/minio server --json --address ${cfg.listenAddress} --console-address ${cfg.consoleAddress} ${toString cfg.dataDir}";
} }