foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 10:58:02 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

hosts/plover: update comments and systemd journal matches for fail2ban

Browse Source
This commit is contained in:
Gabriel Arazas 2023-01-14 12:23:35 +08:00
parent 7de5c14ef5
commit 5341024d96
2 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
hosts/plover/modules/services/gitea.nix
View File

@ -29,6 +29,8 @@ in {
mailerPasswordFile = config.sops.secrets."plover/gitea/smtp/password".path; mailerPasswordFile = config.sops.secrets."plover/gitea/smtp/password".path;
# You can see the available configuration options at
# https://docs.gitea.io/en-us/config-cheat-sheet/.
settings = { settings = {
"repository.pull_request" = { "repository.pull_request" = {
WORK_IN_PROGRESS_PREFIXES = "WIP:,[WIP],DRAFT,[DRAFT]"; WORK_IN_PROGRESS_PREFIXES = "WIP:,[WIP],DRAFT,[DRAFT]";
@ -107,7 +109,10 @@ in {
''; '';
}; };
# Making sure this plays nicely with the database service of choice. # Making sure this plays nicely with the database service of choice. Take
# note, we're mainly using secure schema usage pattern here as described from
# the PostgreSQL documentation at
# https://www.postgresql.org/docs/15/ddl-schemas.html#DDL-SCHEMAS-PATTERNS.
services.postgresql = { services.postgresql = {
ensureUsers = [{ ensureUsers = [{
name = config.services.gitea.user; name = config.services.gitea.user;
@ -132,7 +137,7 @@ in {
gitea = '' gitea = ''
enabled = true enabled = true
backend = systemd backend = systemd
filter = gitea[journalmatch='_SYSTEMD_UNIT=gitea.service'] filter = gitea[journalmatch='_SYSTEMD_UNIT=gitea.service + _COMM=gitea']
maxretry = 8 maxretry = 8
''; '';
}; };

4
hosts/plover/modules/services/vaultwarden.nix
View File

@ -101,14 +101,14 @@ in {
vaultwarden-user = '' vaultwarden-user = ''
enabled = true enabled = true
backend = systemd backend = systemd
filter = vaultwarden-user[journalmatch='_SYSTEMD_UNIT=vaultwarden.service'] filter = vaultwarden-user[journalmatch='_SYSTEMD_UNIT=vaultwarden.service + _COMM=vaultwarden']
maxretry = 5 maxretry = 5
''; '';
vaultwarden-admin = '' vaultwarden-admin = ''
enabled = true enabled = true
backend = systemd backend = systemd
filter = vaultwarden-admin[journalmatch='_SYSTEMD_UNIT=vaultwarden.service'] filter = vaultwarden-admin[journalmatch='_SYSTEMD_UNIT=vaultwarden.service + _COMM=vaultwarden']
maxretry = 3 maxretry = 3
''; '';
}; };