diff --git a/data/backupSchedules.nix b/data/backupSchedules.nix index 2800153..bc9c865 100644 --- a/data/backupSchedules.nix +++ b/data/backupSchedules.nix @@ -16,11 +16,6 @@ rec { }; }; - music = { - OnStartupSec = "2m"; - OnUnitActiveSec = "2h"; - }; - remoteBackups = { OnStartupSec = "1h"; OnUnitActiveSec = "48h"; diff --git a/hosts/hetzner-arm/containers/grocy/default.nix b/hosts/hetzner-arm/containers/grocy/default.nix deleted file mode 100644 index 6d8000a..0000000 --- a/hosts/hetzner-arm/containers/grocy/default.nix +++ /dev/null @@ -1,58 +0,0 @@ -{ - self, - hostPath, - tree, - inputs, - pkgs, - config, - ... -}: let - containerName = "grocy"; - - containerAddresses = import "${hostPath}/data/containerAddresses.nix"; - - hostIP = containerAddresses.host; - containerIP = containerAddresses.containers.${containerName}; -in { - containers.grocy = { - autoStart = true; - privateNetwork = true; - hostAddress = hostIP; - localAddress = containerIP; - - specialArgs = { - inherit inputs; - inherit tree; - inherit self; - inherit hostPath; - }; - - config = {...}: { - nixpkgs.pkgs = pkgs; - - imports = with tree; - [ - presets.nixos.containerBase - ./secrets.nix - ] - ++ (with hosts.hetzner-arm.containers.grocy.profiles; [ - grocy - restic - ]); - - networking.firewall.allowedTCPPorts = [80]; - - home-manager.users.root.home.stateVersion = "24.05"; - system.stateVersion = "24.05"; - }; - }; - - services.nginx.virtualHosts."grocy.owo.monster" = { - forceSSL = true; - enableACME = true; - locations."/" = { - proxyPass = "http://${containerIP}:80"; - proxyWebsockets = true; - }; - }; -} diff --git a/hosts/hetzner-arm/containers/grocy/profiles/grocy.nix b/hosts/hetzner-arm/containers/grocy/profiles/grocy.nix deleted file mode 100644 index 95badb7..0000000 --- a/hosts/hetzner-arm/containers/grocy/profiles/grocy.nix +++ /dev/null @@ -1,55 +0,0 @@ -{ - config, - lib, - ... -}: { - services.grocy = { - enable = true; - hostName = "grocy.owo.monster"; - nginx.enableSSL = false; - phpfpm.settings = { - "listen.owner" = "nginx"; - "pm" = "dynamic"; - "pm.max_children" = 32; - "pm.max_requests" = 500; - "pm.start_servers" = 2; - "pm.min_spare_servers" = 2; - "pm.max_spare_servers" = 5; - "catch_workers_output" = true; - "php_admin_flag[display_errors]" = true; - "php_admin_value[error_log]" = "stderr"; - "php_admin_flag[log_errors]" = true; - }; - settings = { - currency = "GBP"; - culture = "en_GB"; - calendar.firstDayOfWeek = 1; - }; - }; - - services.phpfpm.pools.grocy = let - cfg = config.services.grocy; - in { - phpEnv = { - GROCY_DATAPATH = "${cfg.dataDir}"; - GROCY_CONFIG_FILE = "/etc/grocy/config.php"; - GROCY_DB_FILE = "${cfg.dataDir}/grocy.db"; - GROCY_STORAGE_DIR = "${cfg.dataDir}/storage"; - GROCY_PLUGIN_DIR = "${cfg.dataDir}/plugins"; - GROCY_CACHE_DIR = "${cfg.dataDir}/viewcache"; - }; - }; - - environment.etc."grocy/config.php".text = let - cfg = config.services.grocy; - inherit (lib.trivial) boolToString; - inherit (lib.modules) mkForce; - in - mkForce '' - "$secretFile" - ''; - }; - restic_env = { - fetchScript = '' - cat << EOF > "$secretFile" - AWS_ACCESS_KEY_ID=$(simple_get "/api-keys/backblaze/Chaos-Backups" .keyID) - AWS_SECRET_ACCESS_KEY=$(simple_get "/api-keys/backblaze/Chaos-Backups" .applicationKey) - EOF - ''; - }; - }; - }; -} diff --git a/hosts/hetzner-arm/hetzner-arm.nix b/hosts/hetzner-arm/hetzner-arm.nix index fa37b77..8ba2a97 100644 --- a/hosts/hetzner-arm/hetzner-arm.nix +++ b/hosts/hetzner-arm/hetzner-arm.nix @@ -21,7 +21,6 @@ in { "storage" "mail" "jellyfin" - #"grocy" "vault" ] (name: ./containers + "/${name}")) ++ (with hosts.hetzner-arm.profiles; [