Update stuff

This commit is contained in:
Alois 2026-08-14 15:47:01 +02:00
commit 40183d0266
Signed by: alois
SSH key fingerprint: SHA256:GBzT2DXvAuGV9XIV5W3WrzVpjU54FThmxHXdbz95J24

View file

@ -7,7 +7,12 @@
}; };
outputs = outputs =
{ self, nixpkgs, rust-overlay, ... }: {
self,
nixpkgs,
rust-overlay,
...
}:
let let
systems = [ systems = [
"aarch64-darwin" "aarch64-darwin"
@ -79,7 +84,7 @@
src = source; src = source;
pnpm = pkgs.pnpm; pnpm = pkgs.pnpm;
fetcherVersion = 4; fetcherVersion = 4;
hash = "sha256-x9YvkWSTYG3AULRNXdaNOnHQTtlosZGqq//jV6DPkSk="; hash = "sha256-NUWGQOodwjJTMzJtkuqoL/nWTs85jlpXIZAY4a86QEw=";
}; };
frontend = pkgs.stdenvNoCC.mkDerivation { frontend = pkgs.stdenvNoCC.mkDerivation {
pname = "methanium-status-frontend"; pname = "methanium-status-frontend";
@ -166,7 +171,12 @@
}); });
nixosModules.default = nixosModules.default =
{ config, lib, pkgs, ... }: {
config,
lib,
pkgs,
...
}:
let let
cfg = config.services.methanium-status; cfg = config.services.methanium-status;
acmeHost = if cfg.acmeHost == null then cfg.hostName else cfg.acmeHost; acmeHost = if cfg.acmeHost == null then cfg.hostName else cfg.acmeHost;
@ -238,7 +248,9 @@
options.services.methanium-status = { options.services.methanium-status = {
enable = lib.mkEnableOption "Methanium Status monitoring and status page"; enable = lib.mkEnableOption "Methanium Status monitoring and status page";
package = lib.mkPackageOption self.packages.${pkgs.stdenv.hostPlatform.system} "backend" { }; package = lib.mkPackageOption self.packages.${pkgs.stdenv.hostPlatform.system} "backend" { };
frontendPackage = lib.mkPackageOption self.packages.${pkgs.stdenv.hostPlatform.system} "frontend" { }; frontendPackage =
lib.mkPackageOption self.packages.${pkgs.stdenv.hostPlatform.system} "frontend"
{ };
hostName = lib.mkOption { hostName = lib.mkOption {
type = lib.types.str; type = lib.types.str;
default = "status.methanium.net"; default = "status.methanium.net";
@ -303,11 +315,31 @@
name = "Methanium"; name = "Methanium";
logo = ./apps/frontend/public/methanium.svg; logo = ./apps/frontend/public/methanium.svg;
services = [ services = [
{ id = "methanium-homepage"; name = "Homepage"; url = "https://methanium.net"; } {
{ id = "methanium-ui"; name = "Methanium UI"; url = "https://ui.methanium.net"; } id = "methanium-homepage";
{ id = "vector-verdict"; name = "Vector Verdict"; url = "https://vv.methanium.net"; } name = "Homepage";
{ id = "methanium-git"; name = "Git"; url = "https://git.methanium.net"; } url = "https://methanium.net";
{ id = "methanium-legal"; name = "Legal Page"; url = "https://legal.methanium.net"; } }
{
id = "methanium-ui";
name = "Methanium UI";
url = "https://ui.methanium.net";
}
{
id = "vector-verdict";
name = "Vector Verdict";
url = "https://vv.methanium.net";
}
{
id = "methanium-git";
name = "Git";
url = "https://git.methanium.net";
}
{
id = "methanium-legal";
name = "Legal Page";
url = "https://legal.methanium.net";
}
]; ];
} }
{ {
@ -315,11 +347,32 @@
name = "Tensamin"; name = "Tensamin";
logo = ./apps/frontend/public/tensamin.svg; logo = ./apps/frontend/public/tensamin.svg;
services = [ services = [
{ id = "tensamin-homepage"; name = "Homepage"; url = "https://tensamin.net"; } {
{ id = "tensamin-app"; name = "Web App"; url = "https://app.tensamin.net"; } id = "tensamin-homepage";
{ id = "tensamin-dev"; name = "Web App (Dev)"; url = "https://dev.tensamin.net"; } name = "Homepage";
{ id = "tensamin-docs"; name = "Docs"; url = "https://docs.tensamin.net"; } url = "https://tensamin.net";
{ id = "tensamin-omega"; name = "Omega"; url = "https://omega.tensamin.net"; checkHttp3 = true; } }
{
id = "tensamin-app";
name = "Web App";
url = "https://app.tensamin.net";
}
{
id = "tensamin-dev";
name = "Web App (Dev)";
url = "https://dev.tensamin.net";
}
{
id = "tensamin-docs";
name = "Docs";
url = "https://docs.tensamin.net";
}
{
id = "tensamin-omega";
name = "Omega";
url = "https://omega.tensamin.net";
checkHttp3 = true;
}
]; ];
} }
]; ];
@ -341,8 +394,14 @@
systemd.services.methanium-status = { systemd.services.methanium-status = {
description = "Methanium Status monitor"; description = "Methanium Status monitor";
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
wants = [ "network-online.target" "acme-${acmeHost}.service" ]; wants = [
after = [ "network-online.target" "acme-${acmeHost}.service" ]; "network-online.target"
"acme-${acmeHost}.service"
];
after = [
"network-online.target"
"acme-${acmeHost}.service"
];
restartTriggers = [ configFile ]; restartTriggers = [ configFile ];
serviceConfig = { serviceConfig = {
User = "methanium-status"; User = "methanium-status";
@ -365,7 +424,10 @@
ProtectKernelModules = true; ProtectKernelModules = true;
ProtectKernelTunables = true; ProtectKernelTunables = true;
ProtectSystem = "strict"; ProtectSystem = "strict";
RestrictAddressFamilies = [ "AF_INET" "AF_INET6" ]; RestrictAddressFamilies = [
"AF_INET"
"AF_INET6"
];
RestrictNamespaces = true; RestrictNamespaces = true;
RestrictRealtime = true; RestrictRealtime = true;
SystemCallArchitectures = "native"; SystemCallArchitectures = "native";