wip

nixos/components/network/tinc/private.nix

@@ -21,6 +21,8 @@ let
   network = "private";
 in
 {
+  networking.firewall.trustedInterfaces = [ "tinc.${network}" ];
+
   sops.secrets.tinc_ed25519_key = { };
 
   services.tinc.networks = {

nixos/machines/robi/configuration.nix

@@ -35,7 +35,6 @@
 
     #./hardware-configuration.nix
     #./finance.nix
-    #./grafana.nix
     #./graylog.nix
     #./kibana.nix
     #./mysql.nix

nixos/machines/robi/grafana.nix

@@ -1,38 +0,0 @@
-{ config, ... }: {
-  services.nginx = {
-    enable = true;
-    statusPage = true;
-    virtualHosts = {
-      "grafana.${config.networking.hostName}.private" = {
-        serverAliases = [ ];
-        locations."/" = {
-          proxyPass = "http://${config.networking.hostName}.private:${
-              toString config.services.grafana.port
-            }";
-        };
-      };
-    };
-  };
-
-  #services.grafana = {
-  #  enable = true;
-  #  port = 5656;
-  #  addr =
-  #    config.module.cluster.services.tinc."private".hosts."${config.networking.hostName}".tincIp;
-  #  auth.anonymous = {
-  #    enable = true;
-  #    org_role = "Editor";
-  #    org_name = "AWESOME";
-  #  };
-  #  provision = {
-  #    enable = true;
-  #    datasources = [{
-  #      type = "prometheus";
-  #      isDefault = true;
-  #      name = "Prometheus Workhorse";
-  #      url = "http://workhorse.private:9090";
-  #    }];
-  #  };
-  #};
-
-}

nixos/system/all/nginx-landingpage.nix

@@ -5,18 +5,18 @@
     locations."/" = {
       root = pkgs.landingpage.override {
         jsonConfig = [
-          #{ title = "System Links"; }
-          #{
-          #  text = "Syncthings";
-          #  items = map
-          #    ({ name, host ? "${name}.private", ... }: {
-          #      label = name;
-          #      href = "http://${host}:8384/";
-          #      image = "https://media.giphy.com/media/JoyU4vuzwj6ZA7Ging/giphy.gif";
-          #    })
-          #    (map (name: { inherit name; }) (lib.attrNames
-          #      config.module.cluster.services.tinc."private".hosts));
-          #}
+          { title = "System Links"; }
+          {
+            text = "Syncthings";
+            items = map
+              ({ name, host ? "${name}.private", ... }: {
+                label = name;
+                href = "http://${host}:8384/";
+                image = "https://media.giphy.com/media/JoyU4vuzwj6ZA7Ging/giphy.gif";
+              })
+              (lib.flatten (lib.mapAttrsToList (name: { ... }: { inherit name; })
+                config.services.tinc.networks."private".hostSettings));
+          }
           {
             text = "netdata";
             items = map