fuckwit/nix-config
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Activity

add portforwarder

Browse Source
This commit is contained in:
fuckwit
2025-03-29 14:46:57 +01:00
parent 53ba3a4dc1
commit 4db755eb43
4 changed files with 63 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
nixos/celestia/configuration.nix
View File

@ -262,6 +262,7 @@ in {
"http://127.0.0.1:${builtins.toString config.services.prometheus.exporters.smartctl.port}"
"http://127.0.0.1:${builtins.toString config.services.prometheus.exporters.systemd.port}"
"http://127.0.0.1:${builtins.toString config.services.prometheus.exporters.node.port}"
"http://127.0.0.1:8123"
];
};
};
@ -528,9 +529,12 @@ in {
environment = {
VPN_SERVICE_PROVIDER = "protonvpn";
VPN_TYPE = "wireguard";
VPN_PORT_FORWARDING = "on";
SERVER_COUNTRIES = "Switzerland";
WIREGUARD_ADDRESSES = "10.2.0.2/32";
DNS_ADDRESS = "10.2.0.1";
PORT_FORWARD_ONLY = "on";
VPN_PORT_FORWARDING_UP_COMMAND = ''
/bin/sh -c 'wget -O- --retry-connrefused --post-data "json={\"listen_port\":{{PORTS}}}" http://127.0.0.1:8080/api/v2/app/setPreferences 2>&1'
'';
};
environmentFiles = [
config.sops.secrets."protonvpn_wg_private_key".path
@ -542,12 +546,13 @@ in {
ports = [
"127.0.0.1:8080:8080"
"127.0.0.1:5800:5800"
"127.0.0.1:8123:8123"
];
};
qbittorrent = {
image = "lscr.io/linuxserver/qbittorrent:latest";
autoStart = false;
autoStart = true;
networks = ["container:gluetun"];
environment = {
WEBUI_PORT = "8080";
@ -558,6 +563,18 @@ in {
"/tank/dump/torrent:/downloads"
];
};
qbittorrent-exporter = {
image = "docker.io/esanchezm/prometheus-qbittorrent-exporter";
autoStart = true;
networks = ["container:gluetun"];
dependsOn = ["qbittorrent"];
environment = {
QBITTORRENT_PORT = "8080";
QBITTORRENT_HOST = "127.0.0.1";
EXPORTER_PORT = "8123";
};
};
};
};
};

6
nixos/celestia/secrets.yaml
View File

@ -5,7 +5,7 @@ photoprism-password-file: ENC[AES256_GCM,data:a0fqrjRDc2M=,iv:H/kLPIJsti8QsOJjwP
restic_ssh_key: ENC[AES256_GCM,data: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,iv:JFcu2GO8k7awfB8RV17tcFj5KhXmUxnzjnoEdmMaqxc=,tag:awy4njmuS/l5CCFqWdsy3A==,type:str]
restic_documents_repository_password: ENC[AES256_GCM,data:rcQ5PsvJW2i3e2v1FqbqCOoqiblqFDsqRifzY6YxIKZTNSNrRPgqUduqei/0aSGJTNG+zYS4YRCooCZ/E7mYFg==,iv:IO6OGY+Dfai0Hl/NWT7bqqhTkfhXlUqqnJyQjm87fSw=,tag:K3D112tm+kC5OpEF2t+oZQ==,type:str]
restic_images_repository_password: ENC[AES256_GCM,data:yNWUqZ9ddkfD15mO7NocUYwqNWPaTHXfLkMNq7yy5xgSG4I3G01mFTt5qCPbZ0n+Y6DFlhDQBLAC5SwOvVNggA==,iv:LqA7TG9TS7eyHZ/xqF+L1w5imPdogQGH0DyokaQj4Bc=,tag:1OLRp7VO8Lfy1nQcUr3OWA==,type:str]
protonvpn_wg_private_key: ENC[AES256_GCM,data:vLf0t5wz8FvQ1hTYTWJNkeXJLFXgaSpWEpKTrhoa9nScQO0bt5Q9mZqkupOvQrrnaao2QE77qLBLzalODY5vKT/6,iv:y2iipZwQZo2iLpZ6CjZsRM5/bIL6UxuPa3e57+rs59k=,tag:rz+GN1/1lDJl1xxbGYjl+A==,type:str]
protonvpn_wg_private_key: ENC[AES256_GCM,data:cm4ytBg2lMDDppx50JxmEX8lC+x5bessRmIk60iSuYYCtb7DTlkcwROivz7oG/x1DXjvxjLPW9Y5wEE3GxXD8xo1,iv:B6TeBVC0d6S3XNhv7nSiuVI7nr3M1LeqYMuv0AxvG2c=,tag:RvhSLKRv1FDNntHFvtrelw==,type:str]
telegraf_api_token: ENC[AES256_GCM,data:pCNHkdKlBhYW+IJuvdLgAsk2oXVIowvCVwy2uvJIJQ8DdtRgYgR4JIMcz4l8u+yTPyRPGSqdXnkojNeB9O7T8FM25lklrcRfeKL3ofSY8RJ1FiovcEGYjESi/A7sgrETFMD2QIO0kmZ+3qM=,iv:PKm2hp6+aInR2+AglHImjxIPBFU0FRjpMklranVgjiM=,tag:T/88jJJjkgYxisKZtZAyQg==,type:str]
sops:
kms: []
@ -22,8 +22,8 @@ sops:
K0RaVVNSczZBcDNtaXhGem5iQnlVTDAK+XogkPQD2xYQ7sW8DwAXaaLA/ftw6vZM
wsNs0uun9dgGjZIXcU6AIsrJeUiWBl5zgc6CCd/ad/3QxpmKj1p9Mg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-03-09T15:39:35Z"
mac: ENC[AES256_GCM,data:/dPDrtI7/2HfyoABBSa7ur/+9fT7lMzQ6UIse1k4G+sTnxYLWO/j3wi/Bi7fJxGUHbo+7sS+oIYKZVlejLdCarGuNrt78ml6HzCbLfQpZ0oxWm1vTjc9Fbx4G1dUtUt0aAxSbw78QgUjEDwo9RBaTZW0Csz2qhV0xwSazAqRpmI=,iv:gGcnEiJ40Wy5HPBB3aAlt2J4oNth8T+9RNClRLUad8Y=,tag:N0cPLOcbW+xoi85zoMW23A==,type:str]
lastmodified: "2025-03-29T14:12:23Z"
mac: ENC[AES256_GCM,data:5og1eH8IKVj0UHPgv1qVyC+VgjL1uf7uuJR3w0Y8qqAwNjhyifCTLVRxIg+3EPKQH+w5H0uIovmnlPdRCdwDbkysBkFL6xAlDszouEDX5F+S5ZOZkpONSieeCNG+obVO1PLstLffb+Rh2OR4hhi0xH6D8ryH0yqe7o0tZROBaqo=,iv:Tw6EC4pZcrF4k2H89ZVKlDPT40x02cOrNVH6e57bIGU=,tag:luYMemQCAjHu9D9JgfvpCw==,type:str]
pgp:
- created_at: "2024-01-25T08:00:56Z"
enc: |-