syncthing

home/features/desktop/default.nix

@@ -17,15 +17,14 @@
   xdg.mimeApps.enable = true;
 
   home.sessionVariables = {
-    QT_QPA_PLATFORMTHEME = "qt5ct";
     WEBKIT_DISABLE_COMPOSITING_MODE = "1";
     EDITOR = "emacs";
     VISUAL = "emacs"; 
     XDG_CONFIG_HOME = "\${HOME}/.config";
     XDG_BIN_HOME = "\${HOME}/.local/bin";
     XDG_DATA_HOME = "\${HOME}/.local/share";
-    PATH = [ "\${XDG_BIN_HOME}" "\${HOME}/.cargo/bin" ];
   };
+  home.sessionPath = [ "\${XDG_BIN_HOME}" "\${HOME}/.cargo/bin" ];
   
   home.packages = with pkgs; [
     alacritty

home/features/desktop/office.nix

@@ -1,6 +1,7 @@
 { pkgs, ... }:
 {
   home.packages = with pkgs; [
+    nextcloud-client
     libreoffice
     neomutt
     tutanota-desktop

hosts/lkk-nix-1/default.nix

@@ -60,6 +60,10 @@
         file = ../../secrets/littlelink-lanakk-env.age;
         mode = "770";
       };
+      littlelink-m3tam3re-env = {
+        file = ../../secrets/littlelink-m3tam3re-env.age;
+        mode = "770";
+      };
     };
     identityPaths = [ "/home/m3tam3re/.ssh/lkk-nix-1" ];
   };

hosts/lkk-nix-1/services/containers/#cal.nix#

@@ -0,0 +1,8 @@
+{ config, outputs, ... }: {
+  virtualisation.oci-containers.containers."cal" = {
+    image = "calcom.docker.scarf.sh/calcom/cal.com";
+    environmentFiles = [ config.age.secrets.littlelink-lanakk-env.path ];    
+    ports = [ "3013:3000" ];
+    extraOptions = [ "--ip=10.88.0.23" ];
+  };
+}

hosts/lkk-nix-1/services/containers/default.nix

@@ -5,6 +5,7 @@
     ./little-link.nix
     ./matomo.nix
     ./nextcloud.nix
+    ./nginx.nix
     ./wordpress.nix
     ./wireguard.nix
   ];

hosts/lkk-nix-1/services/containers/little-link.nix

@@ -7,7 +7,7 @@
   };
   virtualisation.oci-containers.containers."littlelink_m3tam3re" = {
     image = "ghcr.io/techno-tim/littlelink-server";
-    environmentFiles = [ config.age.secrets.littlelink-lanakk-env.path ];    
+    environmentFiles = [ config.age.secrets.littlelink-m3tam3re-env.path ];    
     ports = [ "3011:3000" ];
     extraOptions = [ "--ip=10.88.0.21" ];
   };

hosts/lkk-nix-1/services/containers/nginx.nix

@@ -0,0 +1,8 @@
+{ config, outputs, ... }: {
+  virtualisation.oci-containers.containers."http-images" = {
+    image = "docker.io/nginx:alpine";
+    ports = [ "3012:80" ];
+    volumes = [ "/opt/service-data/http-images:/usr/share/nginx/html"];
+    extraOptions = [ "--ip=10.88.0.22" ];
+  };
+}

hosts/lkk-nix-1/services/default.nix

@@ -8,6 +8,7 @@
     ./n8n.nix
     ./postgres.nix
     ./searx.nix
+    ./syncthing.nix
     ./traefik.nix
   ];
 }

hosts/lkk-nix-1/services/syncthing.nix

@@ -0,0 +1,20 @@
+{ config, pkgs, ... }: {
+  services.syncthing = {
+    enable = true;
+    openDefaultPorts = true;
+    guiAddress = "0.0.0.0:8384";
+    overrideDevices = true;
+    overrideFolders = true;
+    devices = {
+      "LK-DATA" = {
+        id = "BI7CMZF-2SGQMXW-RG47HRG-FEH454J-ZTCE544-BXNSCSJ-PXCE7A7-R4CX2Q3";
+      };
+    };
+    folders = {
+      "Bildvorschauen" = {
+        path = "/opt/service-data/http-images";
+        devices = [ "LK-DATA" ];
+      };
+    };
+  };
+}

hosts/lkk-nix-1/services/traefik.nix

@@ -11,6 +11,13 @@
             dnsChallenge = { provider = "godaddy"; };
           };
         };
+        lets-encrypt = {
+          acme = {
+            email = "dev@lanakk.com";
+            storage = "/var/lib/traefik/acme.json";
+            tlsChallenge = {};
+          };
+        };
       };
       api = { };
       entryPoints = {
@@ -39,6 +46,15 @@
               replacement = "https://\${1}/remote.php/dav";
             };
           };
+          nextcloud_headers = {
+            headers = {
+              referrerPolicy = "no-referrer";
+              stsSeconds = "31536000";
+              forceSTSHeader = true;
+              stsPreload = true;
+              stsIncludeSubdomains = true;
+            };
+          };
         };
         services = {
           baserow.loadBalancer.servers = [{ url = "http://localhost:3001/"; }];
@@ -61,6 +77,10 @@
             [{ url = "http://localhost:3010/"; }];
           littlelink-m3tam3re.loadBalancer.servers =
             [{ url = "http://localhost:3011/"; }];
+          http-images.loadBalancer.servers =
+            [{ url = "http://localhost:3012/"; }];
+          syncthing.loadBalancer.servers =
+            [{ url = "http://localhost:8384/"; }];
         };
         routers = {
           api = {
@@ -112,6 +132,15 @@
             service = "matomo";
             entrypoints = "websecure";
           };
+          matomo-weltkarte-pinnwand = {
+            rule = "Host(`stats.weltkarte-pinnwand.com`)";
+            tls = {
+              certResolver = "godaddy";
+              domains = "stats.weltkarte-pinnwand.com";
+            };
+            service = "matomo";
+            entrypoints = "websecure";
+          };
           searx = {
             rule = "Host(`search.lanakk.com`)";
             tls = {
@@ -138,7 +167,7 @@
             };
             service = "nextcloud";
             entrypoints = "websecure";
-            middlewares = "nextcloud_redirectregex";
+            middlewares = "nextcloud_redirectregex,nextcloud_headers";
           };
           wireguard = {
             rule = "Host(`wg.lanakk.com`)";
@@ -178,9 +207,30 @@
             service = "littlelink-lanakk";
             entrypoints = "websecure";
           };
+          http-images = {
+            rule = "Host(`media.lanakk.com`)";
+            tls = {
+              certResolver = "godaddy";
+              domains = "media.lanakk.com";
+            };
+            service = "http-images";
+            entrypoints = "websecure";
+          };
+          syncthing = {
+            rule = "Host(`sync.lanakk.com`)";
+            tls = {
+              certResolver = "godaddy";
+              domains = "sync.lanakk.com";
+            };
+            service = "syncthing";
+            entrypoints = "websecure";
+          };
           littlelink-m3tm3re = {
             rule = "Host(`links.m3tam3re.com`)";
-            tls = { domains = "links.m3tam3re.com"; };
+            tls = {
+              certResolver = "lets-encrypt";
+              domains = "links.m3tam3re.com";
+            };
             service = "littlelink-m3tam3re";
             entrypoints = "websecure";
           };

secrets.nix

@@ -16,6 +16,7 @@ in {
   "briefkasten-env.age".publicKeys = [ root ];
 
   "littlelink-lanakk-env.age".publicKeys = [ root ];
+  "littlelink-m3tam3re-env.age".publicKeys = [ root ];
 
   "traefik-env.age".publicKeys = [ root ];
 }