tangled
alpha
login
or
join now
dunkirk.sh
/
dots
3
fork
atom
Kieran's opinionated (and probably slightly dumb) nix config
3
fork
atom
overview
issues
pulls
pipelines
feat: fix repo pattern
dunkirk.sh
3 weeks ago
fd1fa777
cd2d457c
verified
This commit was signed with the committer's
known signature
.
dunkirk.sh
SSH Key Fingerprint:
SHA256:DqcG0RXYExE26KiWo3VxJnsxswN1QNfTBvB+bdSpk80=
+7
-3
2 changed files
expand all
collapse all
unified
split
machines
terebithia
default.nix
modules
nixos
services
canvas-mcp.nix
+7
-2
machines/terebithia/default.nix
···
378
378
atelier.services.cachet = {
379
379
enable = true;
380
380
domain = "cachet.dunkirk.sh";
381
381
+
deploy.repository = "https://github.com/taciturnaxolotl/cachet";
381
382
secretsFile = config.age.secrets.cachet.path;
382
383
};
383
384
384
385
atelier.services.hn-alerts = {
385
386
enable = true;
386
387
domain = "hn.dunkirk.sh";
388
388
+
deploy.repository = "https://github.com/taciturnaxolotl/hn-alerts";
387
389
secretsFile = config.age.secrets.hn-alerts.path;
388
390
};
389
391
···
394
396
port = 3002;
395
397
workspace = "hackclub";
396
398
channel = "C02T3CU03T3";
399
399
+
repository = "https://github.com/taciturnaxolotl/emojibot";
397
400
secretsFile = config.age.secrets."emojibot/hackclub".path;
398
401
};
399
402
···
478
481
atelier.services.indiko = {
479
482
enable = true;
480
483
domain = "indiko.dunkirk.sh";
484
484
+
deploy.repository = "https://github.com/taciturnaxolotl/indiko";
481
485
};
482
486
483
487
atelier.services.l4 = {
484
488
enable = true;
485
489
domain = "l4.dunkirk.sh";
486
490
port = 3004;
491
491
+
deploy.repository = "https://github.com/taciturnaxolotl/l4";
487
492
deploy.autoUpdate = false;
488
493
secretsFile = config.age.secrets.l4.path;
489
494
};
···
491
496
atelier.services.control = {
492
497
enable = true;
493
498
domain = "control.dunkirk.sh";
494
494
-
deploy.repository = "https://tangled.org/dunkirk.sh/control";
499
499
+
deploy.repository = "https://github.com/taciturnaxolotl/control";
495
500
deploy.autoUpdate = false;
496
501
secretsFile = config.age.secrets.control.path;
497
502
···
541
546
atelier.services.canvas-mcp = {
542
547
enable = true;
543
548
domain = "canvas.dunkirk.sh";
549
549
+
deploy.repository = "https://github.com/taciturnaxolotl/canvas-mcp";
544
550
secretsFile = config.age.secrets.canvas-mcp.path;
545
551
environment = {
546
552
DKIM_PRIVATE_KEY_FILE = "${config.age.secrets.canvas-mcp-dkim.path}";
547
553
};
548
548
-
repository = "https://github.com/taciturnaxolotl/emojibot";
549
554
};
550
555
551
556
services.caddy.virtualHosts."terebithia.dunkirk.sh" = {
-1
modules/nixos/services/canvas-mcp.nix
···
21
21
systemd.services.canvas-mcp.serviceConfig.Environment = [
22
22
"DATABASE_PATH=${cfg.dataDir}/data/canvas-mcp.db"
23
23
"BASE_URL=https://${cfg.domain}"
24
24
-
"PORT=${toString cfg.port}"
25
24
];
26
25
27
26
# Load secrets from agenix if configured