+82

packetmix/systems/teal/menu.nix

··· 1 1 + # SPDX-FileCopyrightText: 2025 FreshlyBakedCake 2 2 + # 3 3 + # SPDX-License-Identifier: MIT 4 4 + 5 5 + { 6 6 + project, 7 7 + system, 8 8 + config, 9 9 + ... 10 10 + }: 11 11 + { 12 12 + systemd.services.menu = { 13 13 + script = '' 14 14 + ${config.packages.menu.result.${system}}/bin/menu 15 15 + ''; 16 16 + serviceConfig = { 17 17 + User = "menu"; 18 18 + Group = "menu"; 19 19 + PrivateTmp = true; 20 20 + }; 21 21 + environment.BIND_ADDR = "127.0.0.1:1038"; 22 22 + }; 23 23 + 24 24 + services.headscale.settings.dns.extra_records = [ 25 25 + { 26 26 + # go.freshly.space -> teal 27 27 + name = "go.freshly.space"; 28 28 + type = "A"; 29 29 + value = "100.64.0.5"; 30 30 + } 31 31 + { 32 32 + # menu.freshlybakedca.ke -> teal 33 33 + name = "menu.freshlybakedca.ke"; 34 34 + type = "A"; 35 35 + value = "100.64.0.5"; 36 36 + } 37 37 + ]; 38 38 + 39 39 + services.nginx.virtualHosts."menu.freshlybakedca.ke" = { 40 40 + listenAddresses = [ 41 41 + "0.0.0.0" 42 42 + "[::0]" 43 43 + ]; 44 44 + 45 45 + addSSL = true; 46 46 + enableACME = true; 47 47 + acmeRoot = null; 48 48 + 49 49 + serverAliases = [ "go.freshly.space" ]; 50 50 + 51 51 + locations."/" = { 52 52 + proxyPass = "http://127.0.0.1:1038"; 53 53 + recommendedProxySettings = true; 54 54 + proxyWebsockets = true; 55 55 + 56 56 + extraConfig = '' 57 57 + proxy_set_header X-Webauth-Login ""; 58 58 + ''; # TODO: consider setting up oauth2-proxy for internal routes (most of _ except for search) so hyperneutrino/other people who don't have TS on all devices can still use this properly 59 59 + }; 60 60 + }; 61 61 + 62 62 + services.nginx.enable = true; 63 63 + services.nginx.virtualHosts."internal.menu.freshlybakedca.ke" = { 64 64 + listenAddresses = [ "localhost.tailscale" ]; 65 65 + 66 66 + addSSL = true; 67 67 + enableACME = true; 68 68 + acmeRoot = null; 69 69 + 70 70 + serverAliases = [ "go.freshly.space" ]; 71 71 + 72 72 + locations."/" = { 73 73 + proxyPass = "http://127.0.0.1:1038"; 74 74 + recommendedProxySettings = true; 75 75 + }; 76 76 + }; 77 77 + 78 78 + services.nginx.tailscaleAuth = { 79 79 + enable = true; 80 80 + virtualHosts = [ "internal.menu.freshlybakedca.ke" ]; 81 81 + }; 82 82 + }

+11 -1

projects/nilla.nix

··· 30 30 }) pins; 31 31 } 32 32 ) 33 33 - ]; 33 33 + ] 34 34 + ++ ( 35 35 + if (builtins.readDir ./.) ? "dependencies" then 36 36 + (lib.fp.pipe [ 37 37 + builtins.readDir 38 38 + builtins.attrNames 39 39 + (map (name: "${./dependencies}/${name}/project.nix")) 40 40 + ] ./dependencies) 41 41 + else 42 42 + [ ] 43 43 + ); 34 44 35 45 args = { 36 46 inherit nilla pins; # pins needs to be a static arg for us to import from it...

+1

projects/packetmix/workspace.josh

··· 1 1 ::.tangled/ 2 2 ::LICENSES/ 3 3 + dependencies/menu = :/menu 3 4 ::npins/ 4 5 ::nilla.nix=projects/nilla.nix 5 6 ::workspace.josh.license=projects/packetmix/workspace.josh.license