diff --git a/hosts/lkk-nix-1/default.nix b/hosts/lkk-nix-1/default.nix index 7024c1a..184b738 100644 --- a/hosts/lkk-nix-1/default.nix +++ b/hosts/lkk-nix-1/default.nix @@ -14,7 +14,7 @@ services.openssh.passwordAuthentication = false; networking = { hostName = "lkk-nix-1"; - firewall.enable = true; + firewall.enable = false; firewall.allowedTCPPortRanges = [{ from = 3000; to = 3100; @@ -30,8 +30,8 @@ secrets = { mj-smtp-user.file = ../../secrets/mj-smtp-user.age; mj-smtp-pass.file = ../../secrets/mj-smtp-pass.age; - - billbee-api-key.file = ../secrets/billbee-api-key.age; + + billbee-api-key.file = ../../secrets/billbee-api-key.age; }; identityPaths = [ "/home/m3tam3re/.ssh/lkk-nix-1" ]; }; diff --git a/hosts/lkk-nix-1/services/containers/baserow.nix b/hosts/lkk-nix-1/services/containers/baserow.nix index 92c6ee4..eef7a0f 100644 --- a/hosts/lkk-nix-1/services/containers/baserow.nix +++ b/hosts/lkk-nix-1/services/containers/baserow.nix @@ -1,6 +1,6 @@ { config, outputs, ...}: { virtualisation.oci-containers.containers."baserow" = { - image = "docker.io/baserow/baserow:1.14.0"; + image = "docker.io/baserow/baserow:1.13.3"; environment = { BASEROW_PUBLIC_URL = "https://db.lanakk.com"; EMAIL_SMTP = "in-v3.mailjet.com"; @@ -15,12 +15,7 @@ }; services.caddy.extraConfig = '' db.lanakk.com { - reverse_proxy localhost:3001 { - header_up Host {host} - header_up X-Real-IP {remote_host} - header_up X-Forwarded-For {remote_host} - header_up X-Forwarded-Proto {scheme} - } + reverse_proxy localhost:3001 } ''; diff --git a/hosts/lkk-nix-1/services/n8n.nix b/hosts/lkk-nix-1/services/n8n.nix index 6249845..c02f8ee 100644 --- a/hosts/lkk-nix-1/services/n8n.nix +++ b/hosts/lkk-nix-1/services/n8n.nix @@ -1,5 +1,5 @@ -{ - +{ config, ... }: { + services.n8n = { enable = true; openFirewall = true; @@ -9,12 +9,12 @@ }; }; systemd.services.n8n.environment = { - BILLBEE_API_KEY = config.age.secrets.bilbee-api-key.path;; + BILLBEE_API_KEY = config.age.billbee-api-key.path; }; services.caddy.extraConfig = '' - wf.lanakk.com { - reverse_proxy localhost:5678 - } -''; + wf.lanakk.com { + reverse_proxy localhost:5678 + } + ''; } diff --git a/secrets/billbee-api-key.age b/secrets/billbee-api-key.age index d616890..363778a 100644 --- a/secrets/billbee-api-key.age +++ b/secrets/billbee-api-key.age @@ -1,15 +1,16 @@ age-encryption.org/v1 -> ssh-rsa DQlE7w -hsfO6BW9zwZ2Uii6c/Dl5o7z4rrYoMw0nQlWCx+2breLo2ye4RQD677onmQ2e0Ke -82jseYfcziCl7VtRh5UrDjij3SEdGaYGj8dPQWhYo5/MamZkYM/YVSLhrnKryVeN -Rg8PDIytDbS5ZXy9SiVt9ZqCg/UqCs/Kz00cYIT8DiKt7Xx+PfyA7Vrl7DXKKYPa -o1xZF67AYVb575jnZO4UxmbFpSJBa+KF9/U/ZMQS0ldaHX5mSID86llvbvJV0zTY -aHTyNPCYSUMrI/rbO3au4hOy3YLenfeKDgv4TkK7fxt7EsCFM4vbDuLcycA71/W/ -KoRS3LgdcLHonUbnOu9fx37yAteYF2MI4Qk5EfqEMi4NO+BVhro4zs5rQXthdtAb -d5XBEL1+RlY38a7wL0Z/YqRb7oWo++TcMcsuvZjxRAU+TyZN0Vp5yDPhICS8sife -Q4EXpNEcJKS2312xpZ0dXw71O8oXo+my0ExvBHJj7NF4Xdq/FKoUguJC36Yse3CZ +OtpKyKFBd86zVAvGIZuBYZuKO3y79nq9Ak6h08j8f8xPSwXtEtcAJBfgBXQCYdV2 +Z+pY7rMpKx/0rx+nG4/Axl2WwuCIhYrB4ypNxYOAdtrgBGdGQueQfZAcq5aV1aRt +KZF1dlcxy3P8CYpodmLZQW+djjGtoDQDIjlNpf/1WPjKEF86Dd+3ihnnGFzIHib5 +9hxIc7iwIEVp6atEoqd9I/Cp/kpwUksAhuX906l0vIvCz1YyuW0oWugGa4uN1ruK +cfCcv4iWqZb/dJg0m/tUH6xXC/njjFs4xh3kauomtYf+PkJ66BK0BfAJenIGwHsm +/t5sI9TzumMm3lfJMjjxqRUfI9Etp9VSe5OcAbeNZkAk84JmU1vddyQ9cQKmJ4il +TUtdRHAYqh1HKdihY0Kf3p/Cua7zNu0PRDRF52zUP06wZ9LLMBokeD6lOVsh5sWb +PcpRQgZxEbgbkSi7XEncSHUWuyhtfRMie3jaFfaNb/Eq1J+U1puHaahG2RboubNl --> XXd~>vui-grease A,Rdm +{~m? HWTg'I9 oeNG -lj0k8zN4AnwtVkHbRlLVkOg ---- LjepOuTYZK+lgRjTbmLgyIBHDCFEYzxMSvAA15/Rw08 - ÊÃM›Œû™~Г7WGÀ,®ß£Üm®Å· rÂ}䋤=ýHɨ°/™ÄUðBFÒup,R *#,oB|-grease q:S"z3 $yJt