mirror of
https://github.com/anotherhadi/nixy.git
synced 2026-04-02 11:12:09 +02:00
add comments
Signed-off-by: Hadi <112569860+anotherhadi@users.noreply.github.com>
This commit is contained in:
@@ -1,3 +1,5 @@
|
|||||||
|
# Cloudflared tunnel configuration for NixOS
|
||||||
|
# It allows exposing services securely via Cloudflare Tunnel
|
||||||
{
|
{
|
||||||
config,
|
config,
|
||||||
pkgs,
|
pkgs,
|
||||||
@@ -5,9 +7,10 @@
|
|||||||
}: {
|
}: {
|
||||||
sops.secrets.cloudflared-token.mode = "0400";
|
sops.secrets.cloudflared-token.mode = "0400";
|
||||||
|
|
||||||
# To setup cloudflared, run
|
# To setup cloudflared, run:
|
||||||
# cloudflared tunnel login
|
# - `cloudflared tunnel login`
|
||||||
# cloudflared tunnel create JackTunnel
|
# - `cloudflared tunnel create YourTunnelName`
|
||||||
|
#
|
||||||
# This will create a credentials file & give you the tunnel ID to use below.
|
# This will create a credentials file & give you the tunnel ID to use below.
|
||||||
services.cloudflared = {
|
services.cloudflared = {
|
||||||
enable = true;
|
enable = true;
|
||||||
@@ -23,11 +26,6 @@
|
|||||||
|
|
||||||
# At the moment (2025), for support of browser rendering of the tunnels, this line is required:
|
# At the moment (2025), for support of browser rendering of the tunnels, this line is required:
|
||||||
services.openssh.settings.Macs = [
|
services.openssh.settings.Macs = [
|
||||||
# Current defaults:
|
|
||||||
"hmac-sha2-512-etm@openssh.com"
|
|
||||||
"hmac-sha2-256-etm@openssh.com"
|
|
||||||
"umac-128-etm@openssh.com"
|
|
||||||
# Added:
|
|
||||||
"hmac-sha2-256"
|
"hmac-sha2-256"
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,3 +1,4 @@
|
|||||||
|
# Cyberchef is a web app for analyzing and decoding data.
|
||||||
{pkgs, ...}: {
|
{pkgs, ...}: {
|
||||||
services = {
|
services = {
|
||||||
nginx.virtualHosts."cyberchef.local" = {
|
nginx.virtualHosts."cyberchef.local" = {
|
||||||
|
|||||||
@@ -1,3 +1,4 @@
|
|||||||
|
# Eleakxir is a search engine for leaked data.
|
||||||
{
|
{
|
||||||
config,
|
config,
|
||||||
inputs,
|
inputs,
|
||||||
|
|||||||
@@ -1,3 +1,4 @@
|
|||||||
|
# Fail2Ban is a log-parsing application that protects Linux servers from brute-force attacks.
|
||||||
{
|
{
|
||||||
services.fail2ban = {
|
services.fail2ban = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|||||||
@@ -1,3 +1,4 @@
|
|||||||
|
# Linkding is a self-hosted bookmark manager
|
||||||
{...}: let
|
{...}: let
|
||||||
port = 9090;
|
port = 9090;
|
||||||
in {
|
in {
|
||||||
|
|||||||
@@ -1,3 +1,4 @@
|
|||||||
|
# Mazanoke is a self-hosted image downgrader
|
||||||
{pkgs, ...}: let
|
{pkgs, ...}: let
|
||||||
version = "1.1.5";
|
version = "1.1.5";
|
||||||
mazanoke-pkg = pkgs.stdenv.mkDerivation {
|
mazanoke-pkg = pkgs.stdenv.mkDerivation {
|
||||||
|
|||||||
@@ -1,3 +1,4 @@
|
|||||||
|
# Stirling-pdf is a high-performance PDF editor and viewer service.
|
||||||
{config, ...}: {
|
{config, ...}: {
|
||||||
services.stirling-pdf = {
|
services.stirling-pdf = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|||||||
Reference in New Issue
Block a user