harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

feat(amd): add opencode web server at opencode.amd.hoyer.world

Browse source 
Mirror of the sgx opencode setup: systemd service on port 4196 fronted
by nginx with a per-host ACME cert (DNS-01 via internetbs). Adds amd
key + path rule to .sops.yaml so secrets under .secrets/amd/ encrypt
for the host.
This commit is contained in:
Harald Hoyer 2026-05-03 15:55:15 +02:00
parent 01f42c0851
commit 0e723e2da8
7 changed files with 158 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
systems/x86_64-linux/amd/default.nix
View file

@ -10,12 +10,17 @@ with lib.metacfg;
./hardware-configuration.nix
./xremap.nix
./sound.nix
./acme.nix
./nginx.nix
./opencode.nix
];
powerManagement.cpuFreqGovernor = "performance";
services.rustdesk-server.signal.enable = false;
networking.firewall.allowedTCPPorts = [
80
443
22000
];
@ -29,6 +34,8 @@ with lib.metacfg;
services.resolved.enable = true;
metacfg = {
services.nginxBase.enable = true;
services.acmeBase.enable = true;
hardware.wooting.enable = true;
base.enable = true;
gui.enable = true;