Options provided by modules in github.com/pinpox/nixos
Whether to enable declarative users.
Default: false
Example: true
Authelia users as JSON-compatible attribute sets. For any field, use a *File suffix (e.g. passwordFile) to read the value from a file at runtime, keeping secrets out of the Nix store.
Default: map[]
Example: map[_type:literalExpression text:{
pinpox = {
displayname = "Pablo";
email = "mail@example.com";
groups = [ "admins" "users" ];
passwordFile = "/run/secrets/pinpox-hash";
};
}
]
Whether to enable authelia authentication server.
Default: false
Example: true
Host serving authelia
Default: auth.pablo.tools
Example: login.pablo.tools
Custom authorization policies for OIDC clients. Each policy can define rules based on groups or networks.
Default: map[]
Example: map[_type:literalExpression text:{
miniflux-users = {
default_policy = "deny";
rules = [
{ policy = "one_factor"; subject = "group:miniflux-users"; }
];
};
}
]
OIDC clients for Authelia. Each client needs at minimum: - client_id - client_secret (hashed) or client_secret_file (path to file with plaintext secret) - redirect_uris
Default: []
Example: map[_type:literalExpression text:[
{
client_id = "miniflux";
client_secret_file = "/run/secrets/miniflux-oidc-secret";
redirect_uris = [ "https://news.example.com/oauth2/oidc/callback" ];
scopes = [ "openid" "profile" "email" ];
authorization_policy = "two_factor";
}
]
]
Whether to enable default bluetooth configuration.
Default: false
Example: true
Authentication URL
Default: map[_type:literalExpression text:"https://${cfg.host}/oauth2/generic"]
Example: https://auth.mydomain.tld/oauth2/generic
Domain protetected by this caddy instance
Default:
Example: 0cx.de
Whether to enable Caddy security portal config.
Default: false
Example: true
Host serving caddy-security portal
Default: map[_type:literalExpression text:"auth.${cfg.domain}"]
Example: auth.0cx.de
Domain of the OpenID provider
Default: map[_type:literalExpression text:cfg.domain]
Example: mydomain.tld
Host of the OpenID provider
Default: map[_type:literalExpression text:"login.${cfg.openID.domain}"]
Example: login.mydomain.tld
Metadata URL of the OpenID Host
Default: map[_type:literalExpression text:"https://${cfg.openID.host}/.well-known/openid-configuration"]
Example: https://myhost.tld/.well-known/openid-configuration
Name of the OpenID provider, shown in the UI
Default: Dex
Example: GitHub
Whether to enable calibre-web config.
Default: false
Example: true
Host serving calibre
Default: books.0cx.de
Example: books.0cx.de
Wheter this host should be skipped by the CI pipeline
Default: false
Example: true
Whether to enable dex authorization provider.
Default: false
Example: true
Host serving dex
Default: login.0cx.de
Example: login.0cx.de
Whether to enable Environment defaults.
Default: false
Example: true
Whether to enable Fonts defaults.
Default: false
Example: true
Whether to enable gitea config.
Default: false
Example: true
Host serving gitea
Default: git.0cx.de
Example: git.0cx.de
Whether to enable Hedgedoc server.
Default: false
Example: true
Whether to enable hello service.
Default: false
Example: true
A very friendly service that greets you
Default: world
Example: universe
Whether to enable Home-assitant server.
Default: false
Example: true
Whether to enable http2irc webhook relay.
Default: false
Example: true
Whether to enable immich photo gallery.
Default: false
Example: true
Host serving immich
Default: photos.0cx.de
Example: pics.0cx.de
Whether to enable Jitsi presence notification service.
Default: false
Example: true
Whether to enable kanidm identity management server.
Default: false
Example: true
Host serving kanidm
Default: auth.pablo.tools
Example: signin.pablo.tools
Whether to enable Krosse Flagge Homepage.
Default: false
Example: true
Whether to enable Locale defaults.
Default: false
Example: true
Whether to enable LVM/Grub defaults.
Default: false
Example: true
Whether to enable miniflux RSS reader.
Default: false
Example: true
Whether to enable minio s3 config.
Default: false
Example: true
Whether to enable Network defaults.
Default: false
Example: true
Whether to enable Nextcloud.
Default: false
Example: true
Whether to enable Nix defaults.
Default: false
Example: true
Whether to enable ntfy-sh notification server.
Default: false
Example: true
Whether to enable OpenSSH server.
Default: false
Example: true
Whether to enable owncast server.
Default: false
Example: true
Host serving owncast
Default: stream.0cx.de
Example: stream.0cx.de
Whether to enable web radio streamer.
Default: false
Example: true
Host serving the radio
Default: radio.0cx.de
Example: radio.0cx.de
Paths to exclude from backup
Default: [*.pyc */.BurpSuite */.arduino15/packages */.cache */.cargo */.coc */.config/Nextcloud/logs */.config/Signal */.config/chromium */.config/discord */.config/retroarch */.container-diff */.go/pkg */.gvfs/ */.local/share/Steam */.local/share/Trash */.local/share/tor-browser */.local/share/typeracer */.local/share/virtualenv */.local/state/NvChad/ */.mozilla/firefox */.nextcloud */.npm */.npm/_cacache */.platformio */.rustup */.thumbnails */.ts3client */.vagrant.d */.vim */.vimtemp */Cache */Downloads */Seafile */VirtualBox VMs */cache2 */code /var/lib/docker discord/Cache tags]
Example: [/home/pinpox/cache]
Paths to backup to offsite storage
Default: []
Example: [/home/pinpox/Notes]
Paths to backup to onsite storage
Default: []
Example: [/home/pinpox/Notes]
Whether to enable restic backups.
Default: false
Example: true
Domain to create the sudomains unders
Default: 0cx.de
Example:
Whether to enable screego server.
Default: false
Example: true
Whether to enable sound defaults.
Default: false
Example: true
Whether to enable storagebox access.
Default: false
Example: true
Whether to mount on access, instead of permanently
Default: false
Example: true
Where to mount the storage
Default: /mnt/storagebox
Example: /mnt/music
Whether to enable The Lounge IRC client and bouncer.
Default: false
Example: true
Whether to enable local unbound for desktops.
Default: false
Example: true
Whether to enable unifi controller (docker).
Default: false
Example: true
Whether to enable vaultwarden password manager.
Default: false
Example: true
Host serving vaultwarden
Default: pass.pablo.tools
Example: pass.pablo.tools
Whether to enable vikunja config.
Default: false
Example: true
Host serving vikunja
Default: todo.0cx.de
Example: tasks.0cx.de
Whether to enable Docker virtualisation.
Default: false
Example: true
Whether to enable Virt-Manager virtualisation.
Default: false
Example: true
Whether to enable VirtualBox virtualisation.
Default: false
Example: true
Whether to enable wastebin server.
Default: false
Example: true
Whether to enable wayland configuration.
Default: false
Example: true
Whether to enable Web VM.
Default: false
Example: true
Whether to enable yubikey defaults.
Default: false
Example: true
Whether to enable ZSH defaults.
Default: false
Example: true