mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-10 23:00:39 +02:00
Code Activity

chore: update to loki 3.0.0, update kanidm, fix upstream oauth2 module

Browse source
This commit is contained in:
oddlama 2024-05-09 17:19:52 +02:00
parent 68d946653a
commit 129559b503
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
6 changed files with 150 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

4
hosts/sentinel/net.nix
View file

@ -35,6 +35,10 @@
};
networking.nftables.firewall.zones.untrusted.interfaces = ["wan"];
networking.nftables.chains.forward.dnat = {
after = ["conntrack"];
rules = ["ct status dnat accept"];
};
wireguard.proxy-sentinel.server = {
host = config.networking.fqdn;

5
hosts/sire/guests/loki.nix
View file

@ -97,7 +97,7 @@ in {
from = "2023-06-01";
store = "tsdb";
object_store = "filesystem";
schema = "v12";
schema = "v13";
index = {
prefix = "index_";
period = "24h";
@ -110,7 +110,6 @@ in {
active_index_directory = "${lokiDir}/tsdb-index";
cache_location = "${lokiDir}/tsdb-cache";
cache_ttl = "24h";
shared_store = "filesystem";
};
filesystem.directory = "${lokiDir}/chunks";
};
@ -119,6 +118,7 @@ in {
limits_config = {
reject_old_samples = true;
reject_old_samples_max_age = "168h";
allow_structured_metadata = false;
};
# Do not delete old logs automatically
@ -129,7 +129,6 @@ in {
compactor = {
working_directory = lokiDir;
shared_store = "filesystem";
compactor_ring.kvstore.store = "inmemory";
};
};

4
hosts/ward/guests/forgejo.nix
View file

@ -31,10 +31,6 @@ in {
# Make sure to masquerade 9922 (wan) -> 22 (proxy-sentinel)
networking.nftables.chains = {
forward.dnat = {
after = ["conntrack"];
rules = ["ct status dnat accept"];
};
postrouting.to-forgejo = {
after = ["hook"];
rules = [