+ minio

flake.lock

@@ -85,11 +85,11 @@
         "utils": "utils_2"
       },
       "locked": {
-        "lastModified": 1678729503,
-        "narHash": "sha256-j+h4Bdqbe+qjzhxdhkRmVgSx2lxJ8HnKeYcAhhnd1zM=",
+        "lastModified": 1679992839,
+        "narHash": "sha256-q3mABQYZeIvznM4tjfcgN4pxI2uJ5HkPF47TZODlNdU=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "24c1a6335e3da6a3ecf82f33ac50c2ad66aee346",
+        "rev": "deb2f59b5c1fd11bec00600517ba7f51984c3090",
         "type": "github"
       },
       "original": {
@@ -116,11 +116,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1678654296,
-        "narHash": "sha256-aVfw3ThpY7vkUeF1rFy10NAkpKDS2imj3IakrzT0Occ=",
+        "lastModified": 1679865578,
+        "narHash": "sha256-sYQmxxqIYL3QFsRYjW0AufhGur8qWfwoOGPGHRJZlGc=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "5a1dc8acd977ff3dccd1328b7c4a6995429a656b",
+        "rev": "4361baa782dc3d3b35fd455a1adc370681d9187c",
         "type": "github"
       },
       "original": {
@@ -148,11 +148,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1678703398,
-        "narHash": "sha256-Y1mW3dBsoWLHpYm+UIHb5VZ7rx024NNHaF16oZBx++o=",
+        "lastModified": 1679878071,
+        "narHash": "sha256-7U5sTaebhjtlTYQI+q1FrbS2YXAhEsbLIcqirQ/kXJk=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "67f26c1cfc5d5783628231e776a81c1ade623e0b",
+        "rev": "44302d48a0b26421d23ee375ade3e47f9aab21df",
         "type": "github"
       },
       "original": {

home/features/coding/emacs.nix

@@ -76,6 +76,7 @@
       epkgs.org-download
       epkgs.org-gcal
       epkgs.org-ql
+      epkgs.org-present
       epkgs.org-roam
       epkgs.org-roam-ui
       epkgs.pass

hosts/lkk-nix-1/default.nix

@@ -35,7 +35,6 @@
       billbee-api-key = {
         file = ../../secrets/billbee-api-key.age;
         mode = "770";
-        owner = "n8n";
       };
 
       traefik-env = {
@@ -43,11 +42,18 @@
         mode = "770";
         owner = "traefik";
       };
+
+      minio-root-cred = {
+        file = ../../secrets/minio-root-cred.age;
+        mode = "770";
+      };
+
       searx-environmentFile = {
         file = ../../secrets/searx-environmentFile.age;
         mode = "770";
         owner = "searx";
       };
+
       wg-easy-environmentFile = {
         file = ../../secrets/wg-easy-environmentFile.age;
         mode = "770";

hosts/lkk-nix-1/services/#netbird.nix#

@@ -1,5 +0,0 @@
-{
-  services.netbird = {
-    enable = true;
-  };
-}

hosts/lkk-nix-1/services/default.nix

@@ -5,6 +5,7 @@
     ./gitea.nix
     ./invidious.nix
     ./mariadb.nix
+    ./minio.nix
     ./n8n.nix
     ./postgres.nix
     ./searx.nix

hosts/lkk-nix-1/services/gitea.nix

@@ -4,6 +4,7 @@
     enable = true;
     package = pkgs.unstable.gitea;
     rootUrl = "https://code.lanakk.com";
+    lfs.enable = true;
     dump = {
       enable = true;
       interval = "03:30:00";

hosts/lkk-nix-1/services/minio.nix

@@ -0,0 +1,11 @@
+{ config, ... }: {
+
+  services.minio = {
+    enable = true;
+    region = "eu-central-1";
+    consoleAddress = ":9001";
+    browser = true;
+    rootCredentialsFile = config.age.secrets.minio-root-cred.path;
+    dataDir = [ "/var/backup/s3" ];
+  };
+}

hosts/lkk-nix-1/services/n8n.nix

@@ -11,4 +11,7 @@
   systemd.services.n8n.environment = {
     BILLBEE_API_KEY = config.age.secrets.billbee-api-key.path; # TODO env file for systemd service
   };
+  systemd.services.traefik.serviceConfig = {
+    EnvironmentFile="${config.age.secrets.traefik-env.path}";
+  };
 }

hosts/lkk-nix-1/services/traefik.nix

@@ -81,6 +81,10 @@
             [{ url = "http://localhost:3012/"; }];
           syncthing.loadBalancer.servers =
             [{ url = "http://localhost:8384/"; }];
+          minio.loadBalancer.servers =
+            [{ url = "http://localhost:9000/"; }];
+          minio-console.loadBalancer.servers =
+            [{ url = "http://localhost:9001/"; }];
         };
         routers = {
           api = {
@@ -141,6 +145,24 @@
             service = "matomo";
             entrypoints = "websecure";
           };
+          minio = {
+            rule = "Host(`s3.lanakk.com`)";
+            tls = {
+              certResolver = "godaddy";
+              domains = "s3.lanakk.com";
+            };
+            service = "minio";
+            entrypoints = "websecure";
+          };
+          minio-console = {
+            rule = "Host(`minio.lanakk.com`)";
+            tls = {
+              certResolver = "godaddy";
+              domains = "minio.lanakk.com";
+            };
+            service = "minio-console";
+            entrypoints = "websecure";
+          };
           searx = {
             rule = "Host(`search.lanakk.com`)";
             tls = {

secrets.nix

@@ -19,4 +19,6 @@ in {
   "littlelink-m3tam3re-env.age".publicKeys = [ root ];
 
   "traefik-env.age".publicKeys = [ root ];
+
+  "minio-root-cred.age".publicKeys = [ root ];
 }