will-holdsworth/dots
1
1
Fork 0
Code Issues 22 Pull requests Projects 1 Releases Packages Wiki Activity Actions 1

feat: prepare for exposure to the internet

Browse source 
* open ports 80 and 443
* password-protect copyparty and ntfy-sh
* randomise usernames for radicale and copyparty
This commit is contained in:
wi11-holdsworth 2026-02-22 16:49:11 +11:00
parent fbd4da91c0
commit 3c46d9e066
9 changed files with 38 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

12
modules/nixos/features/ntfy-sh.nix
View file

@ -10,9 +10,21 @@ in
base-url = "https://ntfy-sh.fi33.buzz";
listen-http = ":${toString port}";
behind-proxy = true;
auth-default-access = "deny-all";
auth-users = [
"Debit3885:$2a$12$ZeFimzdifNFSmf0W2oi.vuZfsqae75md9nhC/Q2BcKMyvDO8T.uEK:admin"
"borgmatic:$2a$12$ZeFimzdifNFSmf0W2oi.vuZfsqae75md9nhC/Q2BcKMyvDO8T.uEK:user"
];
auth-access = [ "borgmatic:backups:wo" ];
};
};
borgmatic.settings = {
source_directories = [
"/var/lib/ntfy-sh/user.db"
];
};
caddy.virtualHosts."ntfy-sh.fi33.buzz".extraConfig = ''
reverse_proxy localhost:${toString port}
tls ${certloc}/cert.pem ${certloc}/key.pem {