[NixOS] Add will user

nixos/code.nix

@@ -29,6 +29,9 @@ makeEnable config "modules.code" true {
     typescript
     nodePackages.typescript-language-server
 
+    # golang
+    go
+
     # Rust
     rustup
 

nixos/gitea-runner.nix

@@ -33,7 +33,7 @@ makeEnable config "modules.gitea-runner" false {
       ];
       enable = true;
       name = config.networking.hostName;
-      url = "https://1896Folsom.duckdns.org:3000";
+      url = "https://dev.railbird.ai";
       tokenFile = config.age.secrets.gitea-runner-token.path;
       labels = [
         "nixos-${pkgs.system}:host"

nixos/gitea.nix

@@ -5,10 +5,10 @@ makeEnable config "modules.gitea" false {
     enable = true;
     lfs.enable = true;
     settings.server = {
-      DOMAIN = "1896Folsom.duckdns.org";
+      DOMAIN = "dev.railbird.ai";
       SSH_PORT = 1123;
       HTTP_PORT = 3001;
-      ROOT_URL = "https://1896Folsom.duckdns.org:3000";
+      ROOT_URL = "https://dev.railbird.ai";
     };
     settings.actions = {
       ENABLED = true;
@@ -17,16 +17,14 @@ makeEnable config "modules.gitea" false {
 
   services.nginx = {
     enable = true;
+    recommendedProxySettings = true;
+    recommendedGzipSettings = true;
+    recommendedTlsSettings = true;
     virtualHosts = {
-      "gitea" = {
-        serverName = "1896Folsom.duckdns.org";
+      "dev.railbird.ai" = {
+        serverName = "dev.railbird.ai";
         enableACME = true;
         forceSSL = true;
-        listen = [{
-          addr = "0.0.0.0";
-          port = 3000;
-          ssl = true;
-        }];
         locations."/" = {
           proxyPass = "http://localhost:3001";
         };

nixos/keys.nix

@@ -34,6 +34,7 @@ rec {
   andyKeys = [
     "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqBnDZXcZIMtOTPxg4pJWyMyNp84kpU2uH88aCkrhMBY2TI4dqAXGY4h1DOyOEyQo9nTgyvdlv4M1Hlp5tzfbuapdTWtt36gb+FKpsTUy8dz45fhKJerUszNbVQ+SpZu4ZFN4Nv9eP3AHO+Mzjcvbf666VMDEzZWu2totd7jxyI9PdK78TD5AOi+kGTtbEgqMpJCcZmJlzJ9NJJ2ejhPCRwcfDrShHcfMeEwWL5MmnzT+WstkRwJAM0f9/ks77jWDnB1Eu55rQykU8zVZ1nz1GiXZcxUpm6B0IRhwn8NGH6nVzSLITtO5eJ7LPQR9XNUODpbrsVGNK6jgGql9gZpYp andy@nixos"
   ];
+  willKeys = [];
   loewyKeys = [
     "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDROb8zcXAgqR3xNpStjt8kSL2Tnic+aWVlQRkmmLveay0RDPatHVKiWtscBoFYvL19xwpi692nZjyPAGQBLMquVx8rexHUFVbs6UVM41Y/QV0UZLSlVM7xNl3nL/dQoxT8OC2a9WJThNm41EjFzzKAuUaWqjm4+uEsC9felBIzndlA5/bIn6EUkMb2X8qmOOIOod1UeVZeK0fWMoDdKsHtQjiQrrP4nLjOmrTQ+BF2yUHwFbW6SCQiXT1Jzq4zymnI717ZraTK0nXzl8amLrGGrh36TrR7pv9hWLeNIMCARvOtABMdQmrT1dI4FxLK1uKM696uzfoaZDUn58G2VGrd loewy gitlab"
   ];

nixos/machines/biskcomp.nix

@@ -25,7 +25,7 @@ in
     path = "/nix-cache";
   };
   modules.gitea.enable = true;
-  modules.gitea-runner.enable = true;
+  modules.gitea-runner.enable = false;
 
   services.vaultwarden = {
     enable = true;
@@ -46,22 +46,11 @@ in
     recommendedGzipSettings = true;
     recommendedTlsSettings = true;
     virtualHosts = {
-      "1896Folsom.duckdns.org" = {
-        # enableACME = true;
-        # forceSSL = true;
-        locations."/" = {
-          proxyPass = "http://[::1]:8222";
-        };
-      };
-      "dev.railbird.ai" = {
+      "vaultwarden.railbird.ai" = {
         enableACME = true;
         forceSSL = true;
-        listen = [{
-          addr = "0.0.0.0";
-          ssl = true;
-        }];
         locations."/" = {
-          proxyPass = "http://localhost:3001";
+          proxyPass = "http://[::1]:8222";
         };
       };
     };

nixos/users.nix

@@ -46,6 +46,12 @@ in
       shell = pkgs.zsh;
       openssh.authorizedKeys.keys = kanivanKeys ++ deanKeys;
     };
+    will = userDefaults // {
+      extraGroups = extraGroupsWithWheel;
+      name = "will";
+      shell = pkgs.zsh;
+      openssh.authorizedKeys.keys = kanivanKeys ++ willKeys;
+    };
     alex = userDefaults // {
       extraGroups = extraGroupsWithWheel;
       name = "alex";