push

.stfolder/syncthing-folder-a0745f.txt

@@ -2,4 +2,4 @@
 # Do not delete.
 
 folderID: nix
-created: 2026-01-29T23:05:44-06:00
+created: 2026-01-29T23:06:32-06:00

modules/hosts/box/box.nix

@@ -3,23 +3,31 @@
   den.aspects.box = {
     includes = with den.aspects; [
       den.default
-      den.provides.home-manager
+      # den.provides.home-manager
       syncthing
       fish
 
-      cloudflared
+      #cloudflared
       searxng
       copyparty
       glances
       # invidious
       mailserver
-      #matrix
+      # matrix
       redlib
-      #sish
+      # sish
       vscode-server
       dns
       openssh
       gitea
+
+      (tunnel 3001 "tvtun")
+      (tunnel 8888 "search")
+      (tunnel 3210 "files")
+      (tunnel 3030 "tube")
+      (tunnel 8975 "reddit")
+      (tunnel 3002 "git")
+      (tunnel 61208 "monitor")
     ];
 
     nixos = {

modules/hosts/laptop/laptop.nix

@@ -1,28 +1,28 @@
 
 { den, ... }: {
   den.aspects.laptop = {
-    includes = [
+    includes = with den.aspects; [
       den.default
-      <amdgpu>
-      <cosmic>
-      <firefox>
-      <audio>
+      den.aspects.amdgpu
+      cosmic
+      firefox
+      audio
 
       den.provides.home-manager
-      <stylix>
-      <syncthing>
-      <swap>
-      <cloudflare-warp>
-      <packages>
-      <development>
-      <cad>
-      <mpd>
-      <virtualisation>
-      <flatpak>
-      <fish>
-      <dns>
-      <openssh>
-      <beets>
+      stylix
+      syncthing
+      swap
+      cloudflare-warp
+      packages
+      development
+      cad
+      mpd
+      virtualisation
+      flatpak
+      fish
+      dns
+      openssh
+      beets
     ];
 
     nixos = {
@@ -32,6 +32,8 @@
         HandleLidSwitch = "ignore";
         HandleLidSwitchDocked = "ignore";
       };
+
+      users.users.bug.extraGroups = [ "networkmanager" "wheel" "audio" "video" "libvirtd" "ydotool" "dialout" ];
     };
   };
 }

modules/infra/cloudflared.nix

@@ -1,32 +1,30 @@
-{
-  den.aspects.cloudflared = {
-    nixos = { pkgs, ...}: let
-      TUNNEL_UUID = "4118935e-359b-4dd2-95bd-eb27f7b0c5bb";
-    in {
-      environment.systemPackages = [ pkgs.cloudflared ];
+{ den, ... }: let
+  tunnel_uuid = "4118935e-359b-4dd2-95bd-eb27f7b0c5bb";
+  domain = "bug.tools";
+  creds  = "/home/bug/.cloudflared/${tunnel_uuid}.json";
 
-      environment.etc."cloudflared/${TUNNEL_UUID}.json".source = "/home/bug/.cloudflared/${TUNNEL_UUID}.json";
+  tunnel = port: subdomain: { pkgs, ... }: {
+    environment.systemPackages = [ pkgs.cloudflared ];
 
-      services.cloudflared = {
-        enable = true;
+    environment.etc."cloudflared/${tunnel_uuid}.json".source = creds;
 
-        tunnels."${TUNNEL_UUID}" = {
-          credentialsFile = "/etc/cloudflared/${TUNNEL_UUID}.json";
-          default = "http_status:404";
+    services.cloudflared = {
+      enable = true;
 
-          ingress = {
-            "tvtun.bug.tools" = "http://127.0.0.1:3001";
-            "search.bug.tools" = "http://127.0.0.1:8888";
-            "files.bug.tools" = "http://127.0.0.1:3210";
-            "tube.bug.tools" = "http://127.0.0.1:3030";
-            "monitor.bug.tools" = "http://127.0.0.1:61208";
-            "reddit.bug.tools" = "http://127.0.0.1:8975";
-            #"matrix.bug.tools" = "http://127.0.0.1:8008";
-            #"bug.tools" = "http://127.0.0.1:8080";
-            "git.bug.tools" = "http://127.0.0.1:3000";
-          };
+      tunnels.${tunnel_uuid} = {
+        credentialsFile = "/etc/cloudflared/${tunnel_uuid}.json";
+        default = "http_status:404";
+
+        ingress = {
+          "${subdomain}.${domain}" = "http://127.0.0.1:${toString port}";
         };
       };
     };
   };
+in {
+  den.aspects.tunnel = port: subdomain: den.lib.parametric {
+    includes = [
+      (_: { nixos = tunnel port subdomain; })
+    ];
+  };
 }

modules/services/gitea.nix

@@ -3,16 +3,11 @@
     nixos = {
       services.gitea = {
         enable = true;
-        config = {
-          database = {
-            type = "sqlite3";
-            path = "/var/lib/gitea/gitea.db";
-          };
 
-          server = {
-            domain = "example.com";
-            httpPort = 3000;
-          };
+        database.type = "mysql";
+
+        settings.service = {
+          DISABLE_REGISTRATION = true;
         };
       };
     };

modules/services/glances.nix

@@ -1,4 +1,4 @@
-{
+{ den, ...}: {
   den.aspects.glances = {
     nixos = { pkgs, ... }: {
       environment.systemPackages = [ pkgs.glances ];

modules/services/mailserver.nix

@@ -2,7 +2,7 @@
   den.aspects.mailserver = {
     nixos = {
       imports = [
-        (builtins.fetchTarball {
+        (fetchTarball {
           url = "https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/archive/master.tar.gz";
           sha256 = "0rm5f749xakmkqrpkl5ay1pydbnlinr50pvwg1vm795js2infmj5";
         })
@@ -41,6 +41,7 @@
               "matrix@bug.tools"
               "fluxer@bug.tools"
               "git@bug.tools"
+              "contact@bug.tools"
             ];
           };
 

modules/services/searxng/searxng.yml

@@ -1,7 +1,5 @@
 general:
-  # Debug mode, only for development. Is overwritten by ${SEARXNG_DEBUG}
   debug: false
-  # displayed name
   instance_name: "search.bug.tools"
   # For example: https://example.com/privacy
   privacypolicy_url: false
@@ -9,7 +7,7 @@ general:
   # use false to disable the donation link
   donation_url: false
   # mailto:contact@example.com
-  contact_url: false
+  contact_url: contact@bug.tools
   # record stats
   enable_metrics: true
   # expose stats in open metrics format at /metrics