stitchy/dotfiles
1
0
Fork 1
Code Issues 2 Pull requests Activity

Compare commits

base: stitchy:b32dcdb826d809710bb542906407add8ab4262d2
Branches Tags
stitchy:master
stitchy:oneplus/scarab
...
compare: stitchy:4bc23b38bd082e5f8cb7dcd32b2e90b41b379a99
Branches Tags
stitchy:master
stitchy:oneplus/scarab

7 commits
b32dcdb826 ... 4bc23b38bd

Author SHA1 Message Date
stitchy
4bc23b38bd
feat: flake update 2025-10-10 16:48:30 -07:00
stitchy
eab8c956b5
feat(grafana): add unifi polling via unpoller 2025-10-10 15:08:01 -07:00
stitchy
c066c5f418
feat(tanzanite): immich 
Added immich as a service that I host. We shall see if it stays
 2025-10-10 15:08:01 -07:00
stitchy
210d1f5a29
chore: migrate postgresql directory to redundant drives 2025-10-10 15:08:01 -07:00
stitchy
2bcac06381
fix(tanzanite): disable grafana analytics 2025-10-10 15:08:01 -07:00
stitchy
0c2340692a
feat(tanzanite): init grafana and prometheus 2025-10-10 15:08:01 -07:00
stitchy
ed86270ec3
security(nginx): disable /metrics from dendrite 2025-10-10 15:08:01 -07:00
2 changed files with 122 additions and 33 deletions
Download patch file Download diff file Expand all files Collapse all files

70
flake.lock generated
View file

@ -5,11 +5,11 @@
"nixpkgs": "nixpkgs"
},
"locked": {
"lastModified": 1755511413,
"narHash": "sha256-cBBF+nwGrSroN6ZewHPFaSThyCvwBxSZMdYEH8DxDx8=",
"lastModified": 1760084311,
"narHash": "sha256-YpNNtvA8v28Gd3/PHXCABuBWOzR0K8CyQPga13LxBH0=",
"owner": "catppuccin",
"repo": "nix",
"rev": "ca11a19d4e1d2ba5e6162f40cb71288551fd51dd",
"rev": "fa3a9d5f80ebfe7f4974bc1939f558690cc56359",
"type": "github"
},
"original": {
@ -86,7 +86,10 @@
},
"flake-utils": {
"inputs": {
"systems": "systems"
"systems": [
"nixpkgs-xr",
"systems"
]
},
"locked": {
"lastModified": 1731533236,
@ -131,11 +134,11 @@
]
},
"locked": {
"lastModified": 1755569926,
"narHash": "sha256-s7D28zPHlFWVZ7dDxm0L1o5+t423rMJUfgCMGUeyYSk=",
"lastModified": 1760130406,
"narHash": "sha256-GKMwBaFRw/C1p1VtjDz4DyhyzjKUWyi1K50bh8lgA2E=",
"owner": "nix-community",
"repo": "home-manager",
"rev": "c613ac14f5600033bf84ae75c315d5ce24a0229b",
"rev": "d305eece827a3fe317a2d70138f53feccaf890a1",
"type": "github"
},
"original": {
@ -174,11 +177,11 @@
"mobile-nixos": {
"flake": false,
"locked": {
"lastModified": 1754708713,
"narHash": "sha256-IzpB0REbJ10A8vZIXnrPoUXEHL4wq8xq2pAlwyiCNb4=",
"lastModified": 1759261417,
"narHash": "sha256-TjuoBb8+isL3KTdGgtYh90XPyeUMFbgNAOG9l23CB3A=",
"owner": "nixos",
"repo": "mobile-nixos",
"rev": "b23f377ed5c458216591bd19c232cb45b2c3f365",
"rev": "e6f6d527bf6abf94dd52fbba3143a720cef96431",
"type": "github"
},
"original": {
@ -189,11 +192,11 @@
},
"nixos-hardware": {
"locked": {
"lastModified": 1755330281,
"narHash": "sha256-aJHFJWP9AuI8jUGzI77LYcSlkA9wJnOIg4ZqftwNGXA=",
"lastModified": 1760106635,
"narHash": "sha256-2GoxVaKWTHBxRoeUYSjv0AfSOx4qw5CWSFz2b+VolKU=",
"owner": "Nixos",
"repo": "nixos-hardware",
"rev": "3dac8a872557e0ca8c083cdcfc2f218d18e113b0",
"rev": "9ed85f8afebf2b7478f25db0a98d0e782c0ed903",
"type": "github"
},
"original": {
@ -205,11 +208,11 @@
},
"nixpkgs": {
"locked": {
"lastModified": 1755027561,
"narHash": "sha256-IVft239Bc8p8Dtvf7UAACMG5P3ZV+3/aO28gXpGtMXI=",
"lastModified": 1759831965,
"narHash": "sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH+47XEBo=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "005433b926e16227259a1843015b5b2b7f7d1fc3",
"rev": "c9b6fb798541223bbb396d287d16f43520250518",
"type": "github"
},
"original": {
@ -256,14 +259,15 @@
"flake-compat": "flake-compat_2",
"flake-utils": "flake-utils",
"nixpkgs": "nixpkgs_3",
"systems": "systems",
"treefmt-nix": "treefmt-nix"
},
"locked": {
"lastModified": 1755566862,
"narHash": "sha256-x25ELwy7HytGyVfkJ360omF5+5k5JUAw5YeG5pVMTEc=",
"lastModified": 1760059371,
"narHash": "sha256-VoyVxOb3maiV8ybnaCd4Zalfqz4ashIrz2pfhK704mI=",
"owner": "nix-community",
"repo": "nixpkgs-xr",
"rev": "f2492718d5552951e85a89448647564ebcde7146",
"rev": "6cb9cca13659e5d5c4e4a42d7f9cd7b9eecc730b",
"type": "github"
},
"original": {
@ -274,11 +278,11 @@
},
"nixpkgs_2": {
"locked": {
"lastModified": 1755186698,
"narHash": "sha256-wNO3+Ks2jZJ4nTHMuks+cxAiVBGNuEBXsT29Bz6HASo=",
"lastModified": 1760038930,
"narHash": "sha256-Oncbh0UmHjSlxO7ErQDM3KM0A5/Znfofj2BSzlHLeVw=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "fbcf476f790d8a217c3eab4e12033dc4a0f6d23c",
"rev": "0b4defa2584313f3b781240b29d61f6f9f7e0df3",
"type": "github"
},
"original": {
@ -290,11 +294,11 @@
},
"nixpkgs_3": {
"locked": {
"lastModified": 1755186698,
"narHash": "sha256-wNO3+Ks2jZJ4nTHMuks+cxAiVBGNuEBXsT29Bz6HASo=",
"lastModified": 1759831965,
"narHash": "sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH+47XEBo=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "fbcf476f790d8a217c3eab4e12033dc4a0f6d23c",
"rev": "c9b6fb798541223bbb396d287d16f43520250518",
"type": "github"
},
"original": {
@ -366,16 +370,16 @@
},
"systems": {
"locked": {
"lastModified": 1681028828,
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
"lastModified": 1689347949,
"narHash": "sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80=",
"owner": "nix-systems",
"repo": "default",
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
"repo": "default-linux",
"rev": "31732fcf5e8fea42e59c2488ad31a0e651500f68",
"type": "github"
},
"original": {
"owner": "nix-systems",
"repo": "default",
"repo": "default-linux",
"type": "github"
}
},
@ -387,11 +391,11 @@
]
},
"locked": {
"lastModified": 1754847726,
"narHash": "sha256-2vX8QjO5lRsDbNYvN9hVHXLU6oMl+V/PsmIiJREG4rE=",
"lastModified": 1758728421,
"narHash": "sha256-ySNJ008muQAds2JemiyrWYbwbG+V7S5wg3ZVKGHSFu8=",
"owner": "numtide",
"repo": "treefmt-nix",
"rev": "7d81f6fb2e19bf84f1c65135d1060d829fae2408",
"rev": "5eda4ee8121f97b218f7cc73f5172098d458f1d1",
"type": "github"
},
"original": {

85
hosts/tanzanite/default.nix
View file

@ -65,6 +65,18 @@ in {
locations."/" = {
proxyPass = "http://127.0.0.1:9008";
};
locations."/metrics" = {
return = "404";
};
};
"pics.stitchy.moe" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://[::1]:${toString config.services.immich.port}";
proxyWebsockets = true;
recommendedProxySettings = true;
};
};
"syncv3.stitchy.moe" = {
enableACME = true;
@ -73,6 +85,79 @@ in {
proxyPass = "http://127.0.0.1:8009";
};
};
"grafana.stitchy.moe" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:3000";
};
extraConfig = ''
allow 10.100.0.0/24;
allow 192.168.51.2;
allow 192.168.51.1;
deny all;
'';
};
};
};
services = {
grafana = {
enable = true;
settings = {
analytics = {
feedback_links_enabled = false;
reporting_enabled = false;
};
};
};
immich = {
enable = true;
port = 2283;
mediaLocation = "/opt/services/immich";
};
postgresql = {
dataDir = "/opt/services/postgresql/${config.services.postgresql.package.psqlSchema}";
};
prometheus = {
enable = true;
exporters = {
node = {
enable = true;
};
unpoller = {
enable = true;
controllers = [{
user = "flyingstitchman";
pass = "/persist/unifi-pass.txt";
verify_ssl = false;
url = "https://localhost:7443";
save_dpi = true;
}];
};
};
globalConfig.scrape_interval = "10s";
scrapeConfigs = [{
job_name = "node";
static_configs = [{
targets = [ "localhost:${toString config.services.prometheus.exporters.node.port}"];
}];
}
{
job_name = "dendrite";
static_configs = [{
targets = [ "localhost:9008"];
}];
}
{
job_name = "unpoller";
static_configs = [{
targets = [ "localhost:9130"];
}];
}
];
};
unpoller = {
};
};