hectic-lab/util.nix
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: +pol bfs server

Browse Source
This commit is contained in:
yukkop
2026-02-17 16:13:58 +00:00
parent 7490ef2fe9
commit d7ada535d4
4 changed files with 49 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.sops.yaml
View File

@@ -2,6 +2,7 @@ keys:
- &snuff age1w4hw2ntxrtfqhht63s9lf7nhjxjmdcc927hndn5ygcqqj532qssq4m2m6p - &snuff age1w4hw2ntxrtfqhht63s9lf7nhjxjmdcc927hndn5ygcqqj532qssq4m2m6p
- &yukkop age1r25zdeqq8nac6dgca9en28r57ffyz9u9d8z5yc25gc8xqz747vaqmdtk0h - &yukkop age1r25zdeqq8nac6dgca9en28r57ffyz9u9d8z5yc25gc8xqz747vaqmdtk0h
- &bfs-server age15yzgmsvl3ku2w863h6gw2vpmw37m9aruv6xrj4fue6n2jpm7pyuqk9xjmj - &bfs-server age15yzgmsvl3ku2w863h6gw2vpmw37m9aruv6xrj4fue6n2jpm7pyuqk9xjmj
- &bfs-pol-server age1fpytf05sg9n6ywpwkmn09lhpfvgtud9h75h76jhxha475zpnasqq952rpu
- &neuro-server age15yzgmsvl3ku2w863h6gw2vpmw37m9aruv6xrj4fue6n2jpm7pyuqk9xjmj - &neuro-server age15yzgmsvl3ku2w863h6gw2vpmw37m9aruv6xrj4fue6n2jpm7pyuqk9xjmj
- &games-server age15yzgmsvl3ku2w863h6gw2vpmw37m9aruv6xrj4fue6n2jpm7pyuqk9xjmj - &games-server age15yzgmsvl3ku2w863h6gw2vpmw37m9aruv6xrj4fue6n2jpm7pyuqk9xjmj
@@ -17,6 +18,7 @@ creation_rules:
- *snuff - *snuff
- *yukkop - *yukkop
- *bfs-server - *bfs-server
- *bfs-pol-server
- path_regex: sus/neuro.yaml$ - path_regex: sus/neuro.yaml$
key_groups: key_groups:

42
nixos/system/bfs/bfs.nix
View File

@@ -21,23 +21,23 @@ in {
imports = [ imports = [
self.nixosModules.hectic self.nixosModules.hectic
inputs.sops-nix.nixosModules.sops inputs.sops-nix.nixosModules.sops
./voice-tune.nix #./voice-tune.nix
./matrix.nix #./matrix.nix
./element-rtc.nix #./element-rtc.nix
./element.nix #./element.nix
]; ];
currentServer = { #currentServer = {
matrix = { # matrix = {
secretsFile = config.sops.secrets."matrix/secrets".path; # secretsFile = config.sops.secrets."matrix/secrets".path;
turnSecretFile = config.sops.secrets."matrix/turn-secret".path; # turnSecretFile = config.sops.secrets."matrix/turn-secret".path;
postgresql = { # postgresql = {
port = 5432; # port = 5432;
initialEnvFile = config.sops.secrets."init-postgresql".path; # initialEnvFile = config.sops.secrets."init-postgresql".path;
}; # };
matrixDomain = "accord.tube"; # matrixDomain = "accord.tube";
}; # };
}; #};
services.xray = { services.xray = {
enable = true; enable = true;
@@ -92,12 +92,12 @@ in {
secrets."config" = {}; secrets."config" = {};
secrets."init-postgresql" = {}; secrets."init-postgresql" = {};
secrets."matrix/secrets" = {}; #secrets."matrix/secrets" = {};
secrets."matrix/turn-secret" = { #secrets."matrix/turn-secret" = {
owner = "turnserver"; # owner = "turnserver";
group = "turnserver"; # group = "turnserver";
mode = "0400"; # mode = "0400";
}; #};
}; };
networking.firewall = { networking.firewall = {

4
package/migrator/migrator.sh
View File

@@ -16,7 +16,7 @@ set -eu
VERSION='0.0.1' VERSION='0.0.1'
MIGRATION_DIR="${MIGRATION_DIR:-migration}" MIGRATION_DIR="${MIGRATION_DIR:-migration}"
DB_URL="${DB_URL:-DB_URL}" : "${DB_URL:=DB_URL}"
REMAINING_ARS= REMAINING_ARS=
quote() { printf "'%s'" "$(printf %s "$1" | sed "s/'/'\\\\''/g")"; } quote() { printf "'%s'" "$(printf %s "$1" | sed "s/'/'\\\\''/g")"; }
@@ -80,7 +80,7 @@ db_exec() {
sqlite) sqlite)
local db_path local db_path
db_path=$(get_sqlite_path) db_path=$(get_sqlite_path)
# Use -batch for non-interactive execution # NOTE: Use -batch for non-interactive execution
printf '%s' "$sql" | sqlite3 -batch "$db_path" printf '%s' "$sql" | sqlite3 -batch "$db_path"
;; ;;
esac esac

39
sus/bfs.xray.yaml
View File

@@ -8,29 +8,38 @@ sops:
- recipient: age1w4hw2ntxrtfqhht63s9lf7nhjxjmdcc927hndn5ygcqqj532qssq4m2m6p - recipient: age1w4hw2ntxrtfqhht63s9lf7nhjxjmdcc927hndn5ygcqqj532qssq4m2m6p
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYWEhFQ3JlTS9wT3U4RjNq YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBybHZqZkUyczJXc1VnaWtx
OFRkQ21pR0xobHF5OGFzWGpJdFBLYkp1dEdvCmcvQnVySWxCWm5VSWwvNS91UzBI NEk2ZnM3YmxnV2UxVENCK0tXYXpnYjE3ZnpnCnA4bTZGQWovUWRYZXpoZ1NtMkdl
N2lJNHdiODd2c1U2cEd4cnhzeSs4YXMKLS0tIFpHUTVjT0hHelYwc2ZrK25MZVJF ZWtiZ1ZDaDBYemxPMFhINzVlaEsxdjAKLS0tIGc4Z2FGblZnQTg5YVlDTUxNR3JY
TG55eWlWOE04UmFsd09tWWR3cWpVQTQKPEyBrE8ml16SAmDsB2quA2BqB4dUb19l alVmeVlrNjJtZktqczJ0R3owMG53b0UKZ3+H5AtoJ2PQsQIPhx6kHvlUfbTbQRwi
wrv2raWhqTyQ+C6YbF4Xysa6lT8FA05As+9ssJ6a4arw6wcRYHQ67g== eRXkH3Fpgf9OG3LCJkozTq6oJk10N3RghQCWbv1dbjwE8Nl23U73iw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1r25zdeqq8nac6dgca9en28r57ffyz9u9d8z5yc25gc8xqz747vaqmdtk0h - recipient: age1r25zdeqq8nac6dgca9en28r57ffyz9u9d8z5yc25gc8xqz747vaqmdtk0h
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyd0hmNFRVVzZOa3gwZE95 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGQ1hZRjVtaDI2Y3RKM2VK
RHA3dHpPbEd0KzAySlU0YnF4dlVZdGppNTMwCjlHR3d1Y1ltMmphUk5kYnYzd0Y2 ODdxOUxqNXNBZ3QzRjBaS3NDSXNwYXpUMUJNCnd3MW8wYkFCc2RoYjBqWDZUM2V1
SXhKa21abXBobTdpUUJPUmtaMGEyTE0KLS0tIE5yWm5Odk1GSnRKRWFvSy9vMXBq eVkzdUozbXFVR1NFdG8xNnFXV3hoRTQKLS0tIFY4a3VtMytseFZiOEFEV2FTanhK
WnpMcHpta0FXTHIyY20rTVhBdmFFa3MKYNK6hE369CE7ZCeCJouC3glK9Me/T4Ft WDlWdmljSVFvbVVuejVyaGlhSUZqT1kKDTlfjHtwtOowAOyWqspfpRMOnvlQ1jhD
QHlNAFR65t9sx1EBjWKwkeM+PFVqifRitC9MbdTzSm1hRyXfQhtQEg== WCMt+2AZFc657cg1U83P2nXKMdhTK237rMvwqFqq/hcoeOxfa4yZ9g==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age15yzgmsvl3ku2w863h6gw2vpmw37m9aruv6xrj4fue6n2jpm7pyuqk9xjmj - recipient: age15yzgmsvl3ku2w863h6gw2vpmw37m9aruv6xrj4fue6n2jpm7pyuqk9xjmj
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjZEQ1UG1EckFSRHpkbjRC YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1bjkzS3ZZdi9WbkYwQm1y
QTFrVWZDOTk0KzFmOGVWSFY3WTRhTy9pb0dzCkRoc1lwR3plZ1lvdTZGdmZkUlp0 V093ZVlrVUw4NVphOWduRjN5SjAyOGtIUTBnClNNOUpzazRmTW1ncm82N1p4OSt1
NTB6cDEyaGZ4bGVBZVFtanQ2a2QrTzgKLS0tIEYrQUpJejZ4QkRKWWRGL2VXZTh1 MU9XaGQrZ291OGdoR0lyUVFwNHRTUGMKLS0tIEFGb280RmlvNER4SHIyVkVsMFBB
dFh2anpQTTBpVDdCd3hIYmJLMmpVM0kKvuWuryBpHTpsn9eq6MosafVH0m2KTmql NWZmTnhXQUJIcndZMUZhNDhqeHl3WjQKo/vmAhkj98zXBjNXLzcziN3aKHey86lo
xzxUibPr2BmeR4QAB+pYLqTBH1+N9atGYdLe5qe7GqEmcjq8IfJnBw== ck1sdS84YyZ3VN60LAtCTIvAigmhgyi3fi7o9LjOnwqnHle72f5CHw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1fpytf05sg9n6ywpwkmn09lhpfvgtud9h75h76jhxha475zpnasqq952rpu
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwdURUVUxDdEMxWUFUMkNx
eUtEQkt3am8zdFo1RDMwVysvdFBabTdYZUY4ClRVSHpKcEY1cG1IM1NOcVJaRWZo
eGJuSXVoS0NNa3BCYUtjeVZJTFJraWcKLS0tIGg2M0d4ZURvdVpGNVVlR3ZEZWRr
ZHZ4VUpKTkFOQmh0Z2tGc0FZVGZRNzQK4dn7kpSXnBOlpXb7otsrYdFFBMCituoE
3T/NHXiwDpcLln8LvLUNBKirR2fwr2d4Ku8vMG8vn7m4b6PzxY59ww==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-12-16T11:55:38Z" lastmodified: "2025-12-16T11:55:38Z"
mac: ENC[AES256_GCM,data:M10MqlFU2vwPMOHghGr6Ob29GvnKHUplAjaAniLEKiiCV54pZnVzL63rTQJW3hyHAHGWmGbXDFHzUdO3Z2xQhWRw7uWd7JMnmlm+uTsel6scvu9fovVJJA3Dr3IhZF8R3WIanS9z+0VfBzrG1xTngp0Jg219vnxgyLTRWRB0rEw=,iv:X3W4d1gT7eKp76aveiphMKbnHmADAtplDyGi4rbKGgQ=,tag:GXXVpUU7nintty/zfrFZEw==,type:str] mac: ENC[AES256_GCM,data:M10MqlFU2vwPMOHghGr6Ob29GvnKHUplAjaAniLEKiiCV54pZnVzL63rTQJW3hyHAHGWmGbXDFHzUdO3Z2xQhWRw7uWd7JMnmlm+uTsel6scvu9fovVJJA3Dr3IhZF8R3WIanS9z+0VfBzrG1xTngp0Jg219vnxgyLTRWRB0rEw=,iv:X3W4d1gT7eKp76aveiphMKbnHmADAtplDyGi4rbKGgQ=,tag:GXXVpUU7nintty/zfrFZEw==,type:str]