chore: reformat codebase

This commit is contained in:
Gabriel Arazas 2023-06-29 14:17:38 +08:00
parent 52b66fa47d
commit 53f7cf6e83
No known key found for this signature in database
GPG Key ID: ADE0C41DAB221FCC
5 changed files with 55 additions and 48 deletions

View File

@ -210,7 +210,7 @@ in
};
};
networking.firewall ={
networking.firewall = {
allowedUDPPorts = [
53 # DNS
853 # DNS-over-TLS/DNS-over-QUIC

View File

@ -33,9 +33,11 @@ in
${lib.concatStringsSep "\n" perUserSchemas}
'';
settings = let
settings =
let
credsDir = path: "/run/credentials/postgresql.service/${path}";
in {
in
{
# Still doing the secure schema usage pattern.
search_path = "\"$user\"";
@ -58,7 +60,8 @@ in
# Setting this up for TLS.
systemd.services.postgresql = {
requires = [ "acme-finished-${postgresqlDomain}.target" ];
serviceConfig.LoadCredential = let
serviceConfig.LoadCredential =
let
certDirectory = config.security.acme.certs."${postgresqlDomain}".directory;
certCredentialPath = path: "${path}:${certDirectory}/${path}";
in

View File

@ -16,14 +16,16 @@ in
{
environment.systemPackages = [ pkgs.wireguard-tools ];
sops.secrets = let
sops.secrets =
let
getKey = key: {
inherit key;
sopsFile = ../../secrets/secrets.yaml;
};
getSecrets = secrets:
(lib.mapAttrs' (name: config:
(lib.mapAttrs'
(name: config:
lib.nameValuePair
"plover/${name}"
((getKey name) // config))

View File

@ -46,9 +46,11 @@ in {
};
# A fuzzy finder that enables fuzzy finding not furry finding, a common misconception.
programs.fzf = let
programs.fzf =
let
fd = "${lib.getBin pkgs.fd}/bin/fd";
in {
in
{
enable = true;
changeDirWidgetCommand = "${fd} --type d";
defaultCommand = "${fd} --type f";

View File

@ -28,7 +28,7 @@
, nodePackages
# Rust
# Rust
, cargo
, rustc
}: