diff --git a/machines/hippocampus/secrets/pass.yaml b/machines/hippocampus/secrets/pass.yaml index 7c96ccd..9101ff2 100644 --- a/machines/hippocampus/secrets/pass.yaml +++ b/machines/hippocampus/secrets/pass.yaml @@ -3,6 +3,7 @@ nextcloud: s3secret: ENC[AES256_GCM,data:lIVuiZMh376MSuu13UPCu49Q64bVbk+WM/CUEIGzV0Q=,iv:J2vHalppWEupWK07zXsMoiH6avmpsgg0Cqcc7EkZVV4=,tag:pxKwiaH5SZa8Vh71gLGQWw==,type:str] jellyfin-pia: ENC[AES256_GCM,data:rbqpmm2EtxcMeJfjlGaJOwPCn4UAZaKsH8Zeztk7A6QiSw==,iv:8A6NHVHgKIL6iwLKgRrT6T3k0pgDI5lL5rDMN5/Egrw=,tag:P6Kh9cOnrB23Z7S72xBK7g==,type:str] anki: ENC[AES256_GCM,data:hUBKr/s1DDorlmbHDUvHtVSumw==,iv:Ekjt6dsncinHhM+dV/mxOjErBQpgKtPOVbmwGRy9XOE=,tag:zvfV9z3QROgsk4eznmxqDw==,type:str] +webdav: ENC[AES256_GCM,data:VLwkAn1Ly36c6E1Qkurz8+mfWiwh3SNOe37R0xKkQqpnUhsnTGDB1fWuf3J6jfhag3dMLemBj5JhQD/IYoP4QKk=,iv:TSpePZuzzv6I3NURNIFL8j6YivTEEJnvorRV/9Nanac=,tag:l2I6RsDsLNdw58L3GjL1Lg==,type:str] vaultenv: ENC[AES256_GCM,data:oTMhUU23v0SFImzDNjfqo3wn26ghqHGfArQl+K9E3u3YI9qmwdN/Z0dpLvT7TI01cdEIwM8ToKAd2HueymTHMT0wXMNAWMFVNm5lUot6U9kV+Pwfq3W+c8MygqXL/QVeFCzUsEa4ZvAE647+2JIkcI95H8mIWfenL0wA5O+OLiEz1fFykMbGBvWm7GM5oFWU9RXo0d5BAIaqd7D5oL3tgi2EnrtnVMJ8USgYA+d3TNCEatHO8ARwtCRhC8FK+86RowBlwiylIySuJiMScvzstB8TWVps4wo7xK0lZ8PUicFI2q+N+Q7B3x1hUW0Z2f4pmxAwb8qRxXZtA7B99bBjAwSwh1A301LYMAKJqELNiNOZ9xjl5r12fAOqP3ujJ84eacNVmsKFpA5HxIfUQBlkoHYRXfkd+Z8wz9fhzr53PvWHblr4eS+jCpJzSP98uyou4FYfMXoYOT9kzNNHGsWAoxLxQusehIaHyicG6uVE53wEQw/r9xeJeg==,iv:anKhX3TVyEeatnB/qjlce3g7cifrX8QlBJ/9UzWUa8k=,tag:BDccovkJBW8q0URMLBxbcQ==,type:str] minioRoot: ENC[AES256_GCM,data:z6+VkyRjWRSh8pu5gO58RRyGXT+Lvl+AVr37A5nXh6aj+q6SevNL7wLf9Joao4xmjXexKVavOhs/9OSBJpmbq0R+MRI=,iv:vrow7hvrTacnMi7sFnsuXwMOHrvr6c8YUTYFUry4E4U=,tag:fWfiEvkuSiXHIFqWnLiMiQ==,type:str] restic: @@ -24,8 +25,8 @@ sops: RVUzMlFya3Z0amdTUTJ5YjFRck5kZzQKoWZzExqzPRpQPL4CdqBalc1/dYtjBH6J LGR0oImfOWlIJwcaJLv/fc470UvXHHwIji9v/pbV7xMkgMjlJthaYg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-01-13T01:17:36Z" - mac: ENC[AES256_GCM,data:nWi/RhlAnQnUQaF6Uc8LbBrf3I4OmXTFPHtqJfwQd221oNK1qyH0Acr7qXAEs7k2GNPJrBPjna5XhNj9mpb4mN9x234HVWQHc5lqWBEu5Tusrs8LhuPq2NPxfpfOXUNpo1+kuQHFbFF8ajej8Lgf3I/CHgqI/WWHgnnmJqKBoI0=,iv:W14NfPYy1fkQYrOeZbwahKKIZSDhQHPnEmU5iGjUNYs=,tag:TwazY3nmSVNqgOfZUvN+Qg==,type:str] + lastmodified: "2024-06-05T19:47:17Z" + mac: ENC[AES256_GCM,data:PAPQ79DD7JoGbX1Hr4OlQA/0vyb8OzFDrSDz9OOkyviHuM69EpTswTQGxMaDiYRUs8vTDjS2gEH26PoApdB3Jn2iA9C1kYTm1kE5Wp0+DCkri+hrcS6FQAq6OX5Kuc6bvpWZLf51j8cPlHbwcSaQoLUOeK6+24vz37C0TCZL4To=,iv:WUD83eQbKc15jA0jQ7VOGz5hf4anNhEUctedhlSS6F4=,tag:DyKbZbfiZg4wsNL2Ahm5Aw==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.8.1 diff --git a/machines/hippocampus/servers/public.nix b/machines/hippocampus/servers/public.nix index 9b57535..37c2834 100644 --- a/machines/hippocampus/servers/public.nix +++ b/machines/hippocampus/servers/public.nix @@ -41,5 +41,8 @@ # Public HASS Access ./public/hass.nix + + # Webdav (for things like org-mobile) + ./public/webdav.nix ]; } diff --git a/machines/hippocampus/servers/public/webdav.nix b/machines/hippocampus/servers/public/webdav.nix new file mode 100644 index 0000000..f545d9a --- /dev/null +++ b/machines/hippocampus/servers/public/webdav.nix @@ -0,0 +1,28 @@ +{ config, pkgs, lib, ... }: { + sops.secrets.webdav = { + owner = config.services.webdav.user; + }; + services.webdav = { + enable = true; + settings = { + address = "0.0.0.0"; + port = 7350; + scope = "/srv/webdav"; + modify = true; + auth = true; + users = [{ + username = "{env}ORG_MOBILE_USER"; + password = "{env}ORG_MOBILE_PASS"; + }]; + }; + environmentFile = config.sops.secrets.webdav.path; + }; + + services.caddy.virtualHosts = { + "webdav.syzygial.cc" = { + extraConfig = '' + reverse_proxy 127.0.0.1:${toString config.services.webdav.settings.port} + ''; + }; + }; +}