3/20

nixos/consensus/configuration.nix

@@ -22,7 +22,7 @@
     docker-compose
     tmux
   ];
-  machine.net.openssh.ports = [2022];
+  machine.net.openssh.ports = [ 2022 ];
   systemd.services.k3s = {
     preStart = ''
       until ${pkgs.tailscale}/bin/tailscale status; do
@@ -48,16 +48,16 @@
         "--flannel-iface=tailscale0"
       ];
     };
-    immich = {
-      enable = true;
-      package = pkgs-unstable.immich;
-      port = 2283;
-      host = "localhost";
-      openFirewall = true;
-      machine-learning.enable = true;
-      mediaLocation = "/rice/immich";
-      accelerationDevices = null;
-    };
+    # immich = {
+    #   enable = false;
+    #   package = pkgs-unstable.immich;
+    #   port = 2283;
+    #   host = "localhost";
+    #   openFirewall = true;
+    #   machine-learning.enable = true;
+    #   mediaLocation = "/rice/immich";
+    #   accelerationDevices = null;
+    # };
     nginx = {
       enable = true;
       virtualHosts."img.10110110.xyz" = {
@@ -90,16 +90,16 @@
         80
         443
         2022
-        2049 #nfs
-        8080 #unifi
-        8443 #unifi
+        2049 # nfs
+        8080 # unifi
+        8443 # unifi
         10001
         10250
-        6443 #k8s
-        25565 #mc
-        25566 #mc
-        9001 #eth
-        30303 #eth
+        6443 # k8s
+        25565 # mc
+        25566 # mc
+        9001 # eth
+        30303 # eth
       ];
       allowedUDPPorts = [
         9001
@@ -116,9 +116,12 @@
     extraOptions = "--dns 1.1.1.1";
   };
 
-  users.users = {
-    immich.extraGroups = [ "video" "render" ];
-  };
+  # users.users = {
+  #   immich.extraGroups = [
+  #     "video"
+  #     "render"
+  #   ];
+  # };
   security.acme = {
     acceptTerms = true;
     defaults.email = "acme@10110110.xyz";