feat: prepare for exposure to the internet

* open ports 80 and 443
* password-protect copyparty and ntfy-sh
* randomise usernames for radicale and copyparty
This commit is contained in:
wi11-holdsworth 2026-02-22 16:49:11 +11:00
parent fbd4da91c0
commit 3c46d9e066
9 changed files with 38 additions and 6 deletions

View file

@ -25,12 +25,12 @@ in
rproxy = 1;
};
accounts.will.passwordFile = config.age.secrets.copyparty-will.path;
accounts.Impatient7119.passwordFile = config.age.secrets.copyparty.path;
volumes."/" = {
path = "/srv/copyparty";
access = {
A = [ "will" ];
A = [ "Impatient7119" ];
};
};
};
@ -44,8 +44,8 @@ in
};
# secrets
age.secrets."copyparty-will" = {
file = ../../../secrets/copyparty-will.age;
age.secrets."copyparty" = {
file = ../../../secrets/copyparty.age;
owner = "copyparty";
};