various fixes
Some checks failed
Test action / kaas (push) Failing after 1s

This commit is contained in:
Chris Kruining 2026-04-05 16:05:01 +02:00
parent a10e74a596
commit 7b37c0e9c3
No known key found for this signature in database
GPG key ID: EB894A3560CCCAD2
3 changed files with 6 additions and 11 deletions

View file

@ -103,6 +103,7 @@ in {
port = 2009; port = 2009;
host_whitelist = "${config.networking.hostName}"; host_whitelist = "${config.networking.hostName}";
permissions = "770";
download_dir = "/var/media/downloads/incomplete"; download_dir = "/var/media/downloads/incomplete";
complete_dir = "/var/media/downloads/done"; complete_dir = "/var/media/downloads/done";
}; };

View file

@ -10,15 +10,6 @@
cfg = config.${namespace}.services.networking.caddy; cfg = config.${namespace}.services.networking.caddy;
hasHosts = (cfg.hosts |> attrNames |> length) > 0; hasHosts = (cfg.hosts |> attrNames |> length) > 0;
caddyBase = pkgs.callPackage "${pkgs.path}/pkgs/by-name/ca/caddy/package.nix" {
buildGo125Module = pkgs.buildGo126Module;
caddy = caddyBase;
};
caddyPackage =
caddyBase.withPlugins {
plugins = ["github.com/corazawaf/coraza-caddy/v2@v2.1.0"];
hash = "sha256-pSXjLaZoRtKV3eFl2ySRSjl3yxi514G1Cb7pfrpxxtE=";
};
in { in {
options.${namespace}.services.networking.caddy = { options.${namespace}.services.networking.caddy = {
enable = mkEnableOption "enable caddy" // {default = true;}; enable = mkEnableOption "enable caddy" // {default = true;};
@ -36,7 +27,10 @@ in {
services.caddy = { services.caddy = {
enable = cfg.enable; enable = cfg.enable;
package = caddyPackage; package = pkgs.caddy.withPlugins {
plugins = ["github.com/corazawaf/coraza-caddy/v2@v2.1.0"];
hash = "sha256-pSXjLaZoRtKV3eFl2ySRSjl3yxi514G1Cb7pfrpxxtE=";
};
virtualHosts = virtualHosts =
cfg.hosts cfg.hosts

View file

@ -118,7 +118,7 @@ in {
enable = true; enable = true;
dbBackend = "postgresql"; dbBackend = "postgresql";
package = pkgs.${namespace}.vaultwarden; package = pkgs.vaultwarden-postgresql;
config = { config = {
SIGNUPS_ALLOWED = false; SIGNUPS_ALLOWED = false;