diff --git a/flake.nix b/flake.nix index 0e94271..ef59531 100644 --- a/flake.nix +++ b/flake.nix @@ -175,7 +175,7 @@ networking = { firewall = { - allowedTCPPorts = [ 80 443 3843 4533 6722 7474 7878 8080 8081 8083 8089 8096 8120 8181 8443 8787 8889 8902 8989 8998 9000 9091 9696 11112 24454 25565 25600 ]; + allowedTCPPorts = [ 80 443 3000 3843 4533 6600 6722 7474 7878 8000 8080 8081 8083 8089 8096 8120 8181 8443 8787 8889 8902 8989 8998 9000 9091 9696 11112 13378 24454 25565 25600 ]; allowedUDPPorts = [ 3478 10001 ]; }; }; diff --git a/hosts/diphda/mc-arcadia-backup.yaml b/hosts/diphda/mc-arcadia-backup.yaml index 22cc9bb..2c80ab7 100644 --- a/hosts/diphda/mc-arcadia-backup.yaml +++ b/hosts/diphda/mc-arcadia-backup.yaml @@ -1,16 +1,16 @@ source_directories: - - /home/eesim/configs/mc-arcadia + - /home/eesim/configs/mc-distant-horizons/ repositories: - - path: ssh://fbv1440u@fbv1440u.repo.borgbase.com/./repo - label: "Minecraft-Arcadia borgbase" + - path: ssh://lxojwl95@lxojwl95.repo.borgbase.com/./repo + label: "Minecraft-DH borgbase" exclude_if_present: - .nobackup compression: auto,zstd archive_name_format: '{hostname}-{now:%Y-%m-%d-%H%M%S}' -encryption_passcommand: 'cat /run/secrets/mc-arcadia/repo_password' +encryption_passcommand: 'cat /run/secrets/mc-dh/repo_password' keep_hourly: 24 keep_daily: 7 diff --git a/hosts/diphda/system.nix b/hosts/diphda/system.nix index 798c485..4bcad4c 100644 --- a/hosts/diphda/system.nix +++ b/hosts/diphda/system.nix @@ -31,6 +31,11 @@ format = "binary"; sopsFile = ../../secrets/diphda/porkbun.keytab; }; + secrets."caddy-porkbun.keytab" = { + format = "binary"; + sopsFile = ../../secrets/diphda/porkbun.keytab; + path = "/home/eesim/configs/caddy/.env"; + }; }; systemd.timers."mc-arcadia-backup" = { @@ -102,6 +107,12 @@ }; }; + services.mpd = { + enable = true; + musicDirectory = "/media/Music"; + network.listenAddress = "any"; + }; + security.acme = { acceptTerms = true; defaults.email = "eesimmons9105@gmail.com";