31 lines
1 KiB
Nix
31 lines
1 KiB
Nix
{ ... }: {
|
|
services.cron = {
|
|
enable = true;
|
|
systemCronJobs = [
|
|
''0 0 * * * root rsync -avr root@framework-server:/Storage/Data/Docker/sysctl.io/letsencrypt/ /Storage/Data/Docker/sysctl.io/letsencrypt/''
|
|
];
|
|
};
|
|
|
|
# Containers
|
|
virtualisation.oci-containers.containers."derp" = {
|
|
image = "docker.io/fredliang/derper";
|
|
environment = {
|
|
DERP_ADDR = ":1443";
|
|
DERP_CERT_DIR = "/app/certs";
|
|
DERP_CERT_MODE = "manual";
|
|
DERP_DOMAIN = "sysctl.io";
|
|
DERP_STUN = "true";
|
|
DERP_VERIFY_CLIENTS = "true";
|
|
};
|
|
volumes = [
|
|
"/var/run/tailscale/tailscaled.sock:/var/run/tailscale/tailscaled.sock:ro"
|
|
"/Storage/Data/Docker/sysctl.io/letsencrypt/external/certificates/certs/*.sysctl.io.crt:/app/certs/sysctl.io.crt:ro"
|
|
"/Storage/Data/Docker/sysctl.io/letsencrypt/external/certificates/private/*.sysctl.io.key:/app/certs/sysctl.io.key:ro"
|
|
];
|
|
ports = [
|
|
"3478:3478/udp"
|
|
"1443:1443/tcp"
|
|
];
|
|
log-driver = "journald";
|
|
};
|
|
}
|