clean up

modules/services/caddy.nix

@@ -74,7 +74,7 @@
       };
       "jf.nicknase27.com" = {
         extraConfig = ''
-          reverse_proxy storage.local:8096
+          reverse_proxy 10.0.0.5:8096
         '';
         serverAliases = ["watch.nicknase27.com"];
       };
@@ -108,12 +108,17 @@
       };
       "storage.nicknase27.com" = {
         extraConfig = ''
-          reverse_proxy storage.local:80
+          reverse_proxy 10.0.0.5:80
         '';
       };
       "photos.nicknase27.com" = {
         extraConfig = ''
-          reverse_proxy storage.local:2283
+          reverse_proxy 10.0.0.5:2283
+        '';
+      };
+      "muse.nicknase27.com" = {
+        extraConfig = ''
+          reverse_proxy 10.0.0.5:30431
         '';
       };
     };

modules/services/gitea.nix

@@ -19,17 +19,17 @@
     };
 
     # Runner
-    gitea-actions-runner = {
-      instances.default = {
-        enable = true;
-        name = "hermes";
-        url = "https://git.nicknase27.com";
-        tokenFile = config.age.secrets.gitea-runner.path;
-        labels = [
-          "ubuntu-latest:docker://node:20-bookworm"
-        ];
-      };
-    };
+    # gitea-actions-runner = {
+    #   instances.default = {
+    #     enable = true;
+    #     name = "hermes";
+    #     url = "https://git.nicknase27.com";
+    #     tokenFile = config.age.secrets.gitea-runner.path;
+    #     labels = [
+    #       "ubuntu-latest:docker://node:20-bookworm"
+    #     ];
+    #   };
+    # };
   };
 
   age.secrets = {
@@ -39,14 +39,14 @@
       owner = "gitea";
       group = "gitea";
     };
-    gitea-runner = {
-      file = ../../secrets/gitea-runner.age;
-      path = "/run/secrets/gitea-runner";
-      owner = "gitea-runner";
-      group = "gitea-runner";
-    };
+    # gitea-runner = {
+    #   file = ../../secrets/gitea-runner.age;
+    #   path = "/run/secrets/gitea-runner";
+    #   owner = "gitea-runner";
+    #   group = "gitea-runner";
+    # };
   };
   networking.firewall = {
-      allowedTCPPorts = [3000];
-    };
+    allowedTCPPorts = [3000];
+  };
 }

modules/system/networking.nix

@@ -1,11 +1,10 @@
 {...}: {
   networking = {
     hostName = "Hermes";
-    #nameservers = ["1.1.1.1" "1.0.0.1"];
-    nameservers = ["10.0.0.1"];
+    nameservers = ["1.1.1.1" "1.0.0.1"];
     firewall = {
       enable = true;
-      trustedInterfaces = ["podman0"];
+      trustedInterfaces = ["podman0" "docker0" "cni-podman0"];
     };
     nftables = {
       enable = true;