hosts/wolumonde/modules/gitea-act.nix

@@ -1,7 +0,0 @@
-{config, ...}: {
-  services.gitea-actions-runner.instances."thermex" = {
-    url = config.services.gitea.settings.server.ROOT_URL;
-    name = "thermex";
-    tokenFile = config.age.secrets.giteaActRunnerToken.path;
-  };
-}

hosts/wolumonde/modules/limbusart.nix

@@ -33,8 +33,8 @@ in {
   };
   users.groups.limbusart = {};
 
-  services.nginx.virtualHosts."limbus.gaze.systems" = {
-    useACMEHost = "gaze.systems";
+  services.nginx.virtualHosts."limbus.company" = {
+    useACMEHost = "limbus.company";
     forceSSL = true;
     locations."/".proxyPass = "http://localhost:3000";
   };

hosts/wolumonde/modules/nginx.nix

@@ -16,12 +16,16 @@
       webroot = "/var/lib/acme/acme-challenge";
       extraDomainNames = [
         "git.gaze.systems"
+        "matrix.gaze.systems"
         "ms.gaze.systems"
         "mq.gaze.systems"
         "couchdb.gaze.systems"
         "doc.gaze.systems"
-        "limbus.gaze.systems"
       ];
     };
+    certs."limbus.company" = {
+      webroot = "/var/lib/acme/acme-challenge";
+      extraDomainNames = [];
+    };
   };
 }

hosts/wolumonde/modules/secrets.nix

@@ -9,5 +9,4 @@
   age.secrets.musikquadConfig.file = ../../../secrets/musikquadConfig.age;
   age.secrets.tmodloaderServerPass.file = ../../../secrets/tmodloaderServerPass.age;
   age.secrets.websiteConfig.file = ../../../secrets/websiteConfig.age;
-  age.secrets.giteaActRunnerToken.file = ../../../secrets/giteaActRunnerToken.age;
 }

secrets/giteaActRunnerToken.age

@@ -1,18 +0,0 @@
-age-encryption.org/v1
--> ssh-rsa Abmvag
-JkhAW9AY1qy0g8Ry4ZTnjuYJ87apaGCrE7GRDcCTRJxEeET+kWs2vi3Tm/qg0pmO
-23euNbiEav47WCMYKji3rzlkzfXFHUx68PX/OmEpZXg7Rq1SAbNZfwjpHGbgsUyp
-Y3r3Ck2u31wkSSpnYHT0ciUrBAx9BHdGZBaqskHLB40vS8seqnZTH5kHTlSElOQ2
-0viZlhDUoJTbwAOdNq4t3rOxd2urPsgg+9o5lt16+A3TzNBeO06l4H+j5JP8rwIj
-pKHZLwXwuVFmrU+vRy0Lb1MDmATRTTZYAL16tLbSeD0WxEIMxN5qnx4AsRLrlVmh
-RpywkaKDbDIWsFilHpCn5AyuOwvsRMCxL6SMHMKGyGUAAbqw/3iJycw+yhityHrf
-0JgBbgKU5/JZCiRWxE/ax+LDt4JhIHlv/PJ1Je714cpBkLVkuK6QUwKDgKvHVO5N
-yTN3e601Aoac5x5YUzIDAHnCbWQJBEN8m1Edi0wz+o5eVbcy1jra6mNbHWqln6l1
-k/iXU/fQ4Lg6n2qc28LRVUIk+nRPSnjaMk3J6g+TJR/0mwx9ZpfKnH51YKwujRWx
-lM+W3z+lgGUl3lgfSawg4L+Yf0NsjcmMh/DV2e0PbfKLWLNzuByrhXkQbHzuNDdI
-wzKghUjEA/6UHFl9HmahoO6bZscaOj4eJlkAW+M3SRo
--> ssh-ed25519 KjIL7g V3xZRjaCRH0v/sWKWHotb9ltOAL2sdSre7EelYSREjM
-F7cUzDL0eWocx413YiSVCwdoZJg0z/O96nyeViX/aoI
---- p9mAOLSQos8OocqzUldVpcRosS84iGX4iMiibIOTQaM
--^wx
T‘ ‹8 ’t>Tû`J<>dÇÊèf˜í]0—~â‡sÁ›±’&µ’¦/Áúã1éÁ$ˆ»õ—·n'
-š%AE_eâ@ô Ð‰h¨¥^

secrets/secrets.nix

@@ -10,5 +10,4 @@ in {
   "nixBuildKey.age".publicKeys = [yusdacra];
   "tmodloaderServerPass.age".publicKeys = [yusdacra wolumonde];
   "websiteConfig.age".publicKeys = [yusdacra wolumonde];
-  "giteaActRunnerToken.age".publicKeys = [yusdacra wolumonde];
 }

shells/default.nix

@@ -19,7 +19,7 @@ tlib.genPkgs (pkgs: let
 in {
   default = mkNakedShell {
     name = "prts";
-    packages = (with pkgs; [git git-crypt alejandra rage]) ++ [agenix-wrapped];
+    packages = (with pkgs; [git git-crypt alejandra helix rage]) ++ [agenix-wrapped];
     shellHook = ''
       echo \"$(tput bold)welcome to PRTS, $USER$(tput sgr0)\"
     '';