diff --git a/hosts/picard/default.nix b/hosts/picard/default.nix index 2888c11b..193916cb 100644 --- a/hosts/picard/default.nix +++ b/hosts/picard/default.nix @@ -39,6 +39,8 @@ boot.loader.systemd-boot.enable = false; services.syncthing.enable = true; + services.syncthing.group = "users"; + services.syncthing.user = "ragon"; networking.interfaces."ens3" = { @@ -61,6 +63,8 @@ services.postgresql.package = pkgs.postgresql_13; + + systemd.services.caddy.serviceConfig.EnvironmentFile = config.age.secrets.desec.path; networking.firewall.allowedTCPPorts = [ 80 443 config.services.forgejo.settings.server.SSH_PORT 25 143 465 587 993 ]; networking.firewall.allowedUDPPorts = [ 443 ];