fix(server): small errors

isabelroses · Aug 16, 2023 · 8dc890d · 8dc890d
1 parent 7633bb4
commit 8dc890d
Show file tree

Hide file tree

Showing 7 changed files with 25 additions and 25 deletions.
diff --git a/flake.lock b/flake.lock
diff --git a/hosts/bernie/default.nix b/hosts/bernie/default.nix
@@ -21,6 +21,7 @@
 
         boot = {
           loader = "grub";
+          device = lib.mkForce "/dev/sda15";
           enableKernelTweaks = true;
           enableInitrdTweaks = true;
           loadRecommendedModules = true;
@@ -71,7 +72,6 @@
     };
 
     zramSwap.enable = true;
-    boot.cleanTmpDir = true;
     services.openssh.enable = true;
     users.users.root.openssh.authorizedKeys.keys = [
       "ssh-rsa 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 root"
@@ -88,9 +88,6 @@
       };
     };
 
-    networking.domain = "isabelroses.com";
-    networking.useDHCP = lib.mkDefault true;
-
     nix.settings.system-features = ["nixos-test" "benchmark" "big-parallel" "kvm" "gccarch-armv8-a"];
   };
 }
diff --git a/hosts/hydra/hardware-configuration.nix b/hosts/hydra/hardware-configuration.nix
@@ -1,6 +1,3 @@
-# Do not modify this file!  It was generated by ‘nixos-generate-config’
-# and may be overwritten by future invocations.  Please make changes
-# to /etc/nixos/configuration.nix instead.
 {
   config,
   lib,

diff --git a/modules/common/core/system/boot/loader/grub/default.nix b/modules/common/core/system/boot/loader/grub/default.nix
@@ -9,10 +9,8 @@
 in {
   config = mkIf (cfg.boot.loader == "grub") {
     boot.loader = {
-      # default grub to disabled, we manually enable grub on "server" hosts
-      # or any other host that needs it
       grub = {
-        enable = mkDefault false;
+        enable = mkDefault true;
         useOSProber = true;
         efiSupport = true;
         enableCryptodisk = mkDefault false;

diff --git a/modules/common/options/system/boot.nix b/modules/common/options/system/boot.nix
@@ -27,6 +27,12 @@ with lib; {
       description = "The bootloader that should be used for the device.";
     };
 
+    device = mkOption {
+      type = with types; nullOr str;
+      default = "nodev";
+      description = "The device to install the bootloader to.";
+    };
+
     plymouth = {
       enable = mkEnableOption "plymouth boot splash";
       withThemes = mkEnableOption "plymouth theme";

diff --git a/modules/common/types/server/services/nginx/default.nix b/modules/common/types/server/services/nginx/default.nix
@@ -46,6 +46,7 @@ in {
           };
         # vaultwawrden
         "vault.isabelroses.com" =
+          mkIf (config.modules.services.vaultwarden.enable)
           template
           // {
             locations."/" = {
@@ -55,16 +56,17 @@ in {
           };
         # gitea
         "git.isabelroses.com" =
+          mkIf (config.modules.services.gitea.enable)
           template
           // {
             locations."/".proxyPass = "http://127.0.0.1:${toString config.services.gitea.settings.server.HTTP_PORT}";
           };
 
         # mailserver
-        "mail.isabelroses.com" = template;
+        "mail.isabelroses.com" = mkIf (config.modules.services.mailserver.enable) template;
 
         # webmail
-        "webmail.isabelroses.com" = template;
+        "webmail.isabelroses.com" = mkIf (config.modules.services.mailserver.enable) template;
 
         "search.isabelroses.com" =
           template

diff --git a/modules/common/types/server/services/vaultwarden/default.nix b/modules/common/types/server/services/vaultwarden/default.nix
@@ -18,7 +18,7 @@ in {
 
     services.vaultwarden = {
       enable = true;
-      environmentFile = config.age.secrets.vaultwarden-env.path;
+      environmentFile = config.sops.secrets.vaultwarden-env.path;
       backupDir = "/srv/storage/vaultwarden/backup";
       config = {
         DOMAIN = "https://vault.isabelroses.com";