add portforwarder

2025-03-29 14:46:57 +01:00 · 2025-03-29 14:46:57 +01:00 · 4db755eb43
commit 4db755eb43
parent 53ba3a4dc1
4 changed files with 63 additions and 9 deletions
--- a/nixos/celestia/configuration.nix
+++ b/nixos/celestia/configuration.nix
@ -262,6 +262,7 @@ in {
              "http://127.0.0.1:${builtins.toString config.services.prometheus.exporters.smartctl.port}"
              "http://127.0.0.1:${builtins.toString config.services.prometheus.exporters.systemd.port}"
              "http://127.0.0.1:${builtins.toString config.services.prometheus.exporters.node.port}"
+              "http://127.0.0.1:8123"
            ];
          };
        };
@ -528,9 +529,12 @@ in {
          environment = {
            VPN_SERVICE_PROVIDER = "protonvpn";
            VPN_TYPE = "wireguard";
+            VPN_PORT_FORWARDING = "on";
            SERVER_COUNTRIES = "Switzerland";
-            WIREGUARD_ADDRESSES = "10.2.0.2/32";
-            DNS_ADDRESS = "10.2.0.1";
+            PORT_FORWARD_ONLY = "on";
+            VPN_PORT_FORWARDING_UP_COMMAND = ''
+              /bin/sh -c 'wget -O- --retry-connrefused --post-data "json={\"listen_port\":{{PORTS}}}" http://127.0.0.1:8080/api/v2/app/setPreferences 2>&1'
+            '';
          };
          environmentFiles = [
            config.sops.secrets."protonvpn_wg_private_key".path
@ -542,12 +546,13 @@ in {
          ports = [
            "127.0.0.1:8080:8080"
            "127.0.0.1:5800:5800"
+            "127.0.0.1:8123:8123"
          ];
        };

        qbittorrent = {
          image = "lscr.io/linuxserver/qbittorrent:latest";
-          autoStart = false;
+          autoStart = true;
          networks = ["container:gluetun"];
          environment = {
            WEBUI_PORT = "8080";
@ -558,6 +563,18 @@ in {
            "/tank/dump/torrent:/downloads"
          ];
        };
+
+        qbittorrent-exporter = {
+          image = "docker.io/esanchezm/prometheus-qbittorrent-exporter";
+          autoStart = true;
+          networks = ["container:gluetun"];
+          dependsOn = ["qbittorrent"];
+          environment = {
+            QBITTORRENT_PORT = "8080";
+            QBITTORRENT_HOST = "127.0.0.1";
+            EXPORTER_PORT = "8123";
+          };
+        };
      };
    };
  };
--- a/nixos/celestia/secrets.yaml
+++ b/nixos/celestia/secrets.yaml
@ -5,7 +5,7 @@ photoprism-password-file: ENC[AES256_GCM,data:a0fqrjRDc2M=,iv:H/kLPIJsti8QsOJjwP
 restic_ssh_key: ENC[AES256_GCM,data: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,iv:JFcu2GO8k7awfB8RV17tcFj5KhXmUxnzjnoEdmMaqxc=,tag:awy4njmuS/l5CCFqWdsy3A==,type:str]
 restic_documents_repository_password: ENC[AES256_GCM,data:rcQ5PsvJW2i3e2v1FqbqCOoqiblqFDsqRifzY6YxIKZTNSNrRPgqUduqei/0aSGJTNG+zYS4YRCooCZ/E7mYFg==,iv:IO6OGY+Dfai0Hl/NWT7bqqhTkfhXlUqqnJyQjm87fSw=,tag:K3D112tm+kC5OpEF2t+oZQ==,type:str]
 restic_images_repository_password: ENC[AES256_GCM,data:yNWUqZ9ddkfD15mO7NocUYwqNWPaTHXfLkMNq7yy5xgSG4I3G01mFTt5qCPbZ0n+Y6DFlhDQBLAC5SwOvVNggA==,iv:LqA7TG9TS7eyHZ/xqF+L1w5imPdogQGH0DyokaQj4Bc=,tag:1OLRp7VO8Lfy1nQcUr3OWA==,type:str]
-protonvpn_wg_private_key: ENC[AES256_GCM,data:vLf0t5wz8FvQ1hTYTWJNkeXJLFXgaSpWEpKTrhoa9nScQO0bt5Q9mZqkupOvQrrnaao2QE77qLBLzalODY5vKT/6,iv:y2iipZwQZo2iLpZ6CjZsRM5/bIL6UxuPa3e57+rs59k=,tag:rz+GN1/1lDJl1xxbGYjl+A==,type:str]
+protonvpn_wg_private_key: ENC[AES256_GCM,data:cm4ytBg2lMDDppx50JxmEX8lC+x5bessRmIk60iSuYYCtb7DTlkcwROivz7oG/x1DXjvxjLPW9Y5wEE3GxXD8xo1,iv:B6TeBVC0d6S3XNhv7nSiuVI7nr3M1LeqYMuv0AxvG2c=,tag:RvhSLKRv1FDNntHFvtrelw==,type:str]
 telegraf_api_token: ENC[AES256_GCM,data:pCNHkdKlBhYW+IJuvdLgAsk2oXVIowvCVwy2uvJIJQ8DdtRgYgR4JIMcz4l8u+yTPyRPGSqdXnkojNeB9O7T8FM25lklrcRfeKL3ofSY8RJ1FiovcEGYjESi/A7sgrETFMD2QIO0kmZ+3qM=,iv:PKm2hp6+aInR2+AglHImjxIPBFU0FRjpMklranVgjiM=,tag:T/88jJJjkgYxisKZtZAyQg==,type:str]
 sops:
    kms: []
@ -22,8 +22,8 @@ sops:
            K0RaVVNSczZBcDNtaXhGem5iQnlVTDAK+XogkPQD2xYQ7sW8DwAXaaLA/ftw6vZM
            wsNs0uun9dgGjZIXcU6AIsrJeUiWBl5zgc6CCd/ad/3QxpmKj1p9Mg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-03-09T15:39:35Z"
-    mac: ENC[AES256_GCM,data:/dPDrtI7/2HfyoABBSa7ur/+9fT7lMzQ6UIse1k4G+sTnxYLWO/j3wi/Bi7fJxGUHbo+7sS+oIYKZVlejLdCarGuNrt78ml6HzCbLfQpZ0oxWm1vTjc9Fbx4G1dUtUt0aAxSbw78QgUjEDwo9RBaTZW0Csz2qhV0xwSazAqRpmI=,iv:gGcnEiJ40Wy5HPBB3aAlt2J4oNth8T+9RNClRLUad8Y=,tag:N0cPLOcbW+xoi85zoMW23A==,type:str]
+    lastmodified: "2025-03-29T14:12:23Z"
+    mac: ENC[AES256_GCM,data:5og1eH8IKVj0UHPgv1qVyC+VgjL1uf7uuJR3w0Y8qqAwNjhyifCTLVRxIg+3EPKQH+w5H0uIovmnlPdRCdwDbkysBkFL6xAlDszouEDX5F+S5ZOZkpONSieeCNG+obVO1PLstLffb+Rh2OR4hhi0xH6D8ryH0yqe7o0tZROBaqo=,iv:Tw6EC4pZcrF4k2H89ZVKlDPT40x02cOrNVH6e57bIGU=,tag:luYMemQCAjHu9D9JgfvpCw==,type:str]
    pgp:
        - created_at: "2024-01-25T08:00:56Z"
          enc: |-
--- a/nixos/primordial/configuration.nix
+++ b/nixos/primordial/configuration.nix
@ -1,6 +1,7 @@
 {
  config,
  pkgs,
+  lib,
  ...
 }: let
  mkWellKnown = data: ''
@ -20,6 +21,7 @@ in {
  sops.secrets."gitlab-secret-key-base".owner = config.users.users.gitlab.name;
  sops.secrets."gitlab-otp-key-base".owner = config.users.users.gitlab.name;
  sops.secrets."gitlab-jws-key-pem".owner = config.users.users.gitlab.name;
+  sops.secrets."gitlab-runner-authentication-file" = {};

  imports = [
    ./mail.nix
@ -28,6 +30,7 @@ in {

  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
+  boot.kernel.sysctl."net.ipv4.ip_forward" = true;

  networking = {
    hostName = "primordial";
@ -90,6 +93,7 @@ in {
      enable = true;
      https = true;
      host = "gitlab.fuckwit.dev";
+      port = 443;
      databasePasswordFile = secretFile "gitlab-db-password";
      initialRootPasswordFile = secretFile "gitlab-initial-root-pw";
      secrets = {
@ -98,6 +102,25 @@ in {
        dbFile = secretFile "gitlab-db-key-base";
        jwsFile = secretFile "gitlab-jws-key-pem";
      };
+      registry = {
+        enable = true;
+        defaultForProjects = true;
+        externalAddress = "https://registry-git.fuckwit.dev";
+        externalPort = 443;
+        keyFile = "/run/gitlab/registry.pem";
+        certFile = "/run/gitlab/registry.crt";
+      };
+    };
+
+    gitlab-runner = {
+      enable = true;
+
+      services = {
+        default = {
+          authenticationTokenConfigFile = secretFile "gitlab-runner-authentication-file";
+          dockerImage = "debian:stable";
+        };
+      };
    };

    matrix-synapse = {
@ -214,6 +237,15 @@ in {
        };
      };

+      virtualHosts."registry-git.fuckwit.dev" = {
+        enableACME = true;
+        forceSSL = true;
+
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:4567";
+        };
+      };
+
      # virtualHosts."drone.fuckwit.dev" = {
      #   enableACME = true;
      #   addSSL = true;
@ -304,7 +336,11 @@ in {
    };
  };

-  virtualisation.podman.enable = true;
+  virtualisation.podman = {
+    enable = true;
+    dockerSocket.enable = true;
+  };
+  virtualisation.docker.enable = lib.mkForce false;

  users.users."root".openssh.authorizedKeys.keys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP8zNAXScQ4FoWNxF4+ALJXMSi3EbpqZP5pO9kfg9t8o patrick@NBG1-DC3-PC20-2017-10-24"
--- a/nixos/primordial/secrets.yaml
+++ b/nixos/primordial/secrets.yaml
@ -7,6 +7,7 @@ gitlab-db-key-base: ENC[AES256_GCM,data:zzuYk07Tk4ti4k0y/lSDqrhDxdr5YqqKP5DUl0nC
 gitlab-secret-key-base: ENC[AES256_GCM,data:wXaad/yooHobhuKS+BFxiy29g0iUmFn5rLRmEMWchoQ=,iv:6JFjgkfgfTNr59v+PvIKItYJXtycGffmc7gJtyeHzMg=,tag:Nll20xSIXd2DoWcd1MJojw==,type:str]
 gitlab-otp-key-base: ENC[AES256_GCM,data:3LGpjpqaQdeO7v3waFCZDVVKtgXl3h0N/XiBcqlW2Kc=,iv:Kk1Af6FoTs+kejHmTL3FXoQJ9XAV+2J5+xC+heGbKu4=,tag:EI0agVoGUVEqphCCFfRwLA==,type:str]
 gitlab-jws-key-pem: ENC[AES256_GCM,data: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,iv:/+l13lQ/8tvLt+SHO03H8dBsUyoIDVhfas1v2n1RYPc=,tag:3Q91nWeZT8PQo/EWq8/6DQ==,type:str]
+gitlab-runner-authentication-file: ENC[AES256_GCM,data:M0dn62YNywEs08eHM0EcLJJfldsqlxrdeyJJSzp7yS3EO1umQPoPrlNnrZpwjLH2EDyMP81M/S5kPoR70ckB0LYt4w2d7Iao+6/WCvIGrhhN5WPejvg=,iv:qopX16X0dfrzjQ1vMuxWIouV96dig70iDU6dX4Y4Lc0=,tag:ZVac+M3OyMtLbJWM/1CPMA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -22,8 +23,8 @@ sops:
            V1h2NGxyNVc3WnF2ZFBpQm1oK1AzeGcK4GoD2E8nwOl/WKtgMgs0Y1Q8abRX4mpy
            GdHGDQUWvySCisJo4JXsooYkLjOyKvir+vcVbX4nDd4L1W2OMULkrg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-03-28T17:46:59Z"
-    mac: ENC[AES256_GCM,data:qw2sbHTphiHj9V7BZSpaS6mZFzhErV80Q49T3Yk/u1boxrwdiwvGTmA3LVLE0TcNEgg6xxR8lpiPZsDuqf5D5lV351aVPhlEFf9LtNckEfWzvQh0Nq/bVg404mP5HRy46kwxdbHligcZjFtD9ACbuwJbUyXLGoHPfHxs8ZQfeXY=,iv:Wj0lH4rRv/WOKTnxTr0wVIY/eeBbD7f1EgbBYRFYeek=,tag:udBZ7DGaw7szBrU/urTkJw==,type:str]
+    lastmodified: "2025-03-31T16:36:04Z"
+    mac: ENC[AES256_GCM,data:+oNkJqe4S4W6Z5HlfxKxaPm8yKDh7QkYKFL1KthNNjSjGQma5HIJdsbXwK4NSUV3cMrHQpbv3b8KPXx2ActX6bHNM4LF9yhivhAUJ2RMJlSEgbV561SE7r8dZ4q/qfby3E+X8RCc4UroY94jW9tSZP+/4fFk1kLkoUnWqpI6RNE=,iv:TP0XbowklPEbyGQEPSExU8bb+pY5L3HLHQPUOaXeao0=,tag:ePsaHyu7uQI2pcU6/fmK9A==,type:str]
    pgp:
        - created_at: "2024-01-25T11:10:44Z"
          enc: |-