Compare commits

..

2 Commits

Author SHA1 Message Date
cc0f6ec856 Switch to IONOS
Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
2025-09-29 20:49:14 +01:00
81b3faaf3e Update consent duration
Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
2025-09-29 20:49:14 +01:00
10 changed files with 17 additions and 13 deletions

View File

@@ -35,7 +35,7 @@
networking = { networking = {
hostName = "jupiter-vps"; hostName = "jupiter-vps";
publicIPv4 = "51.75.170.190"; publicIPv4 = "217.154.55.15";
}; };
environment.impermanence.enable = lib.mkForce false; environment.impermanence.enable = lib.mkForce false;

View File

@@ -1,7 +1,7 @@
{ {
disko.devices = { disko.devices = {
disk.main = { disk.main = {
device = "/dev/sda"; device = "/dev/vda";
type = "disk"; type = "disk";
content = { content = {
type = "gpt"; type = "gpt";

View File

@@ -54,7 +54,7 @@
networking = { networking = {
hostName = "jupiter"; hostName = "jupiter";
publicIPv4 = "51.89.210.124"; publicIPv4 = "87.106.36.59";
}; };
boot.initrd = { boot.initrd = {

View File

@@ -31,6 +31,14 @@ in
labels = [ labels = [
"traefik.enable=true" "traefik.enable=true"
"traefik.http.routers.blog.rule=Host(`blog.karaolidis.com`)" "traefik.http.routers.blog.rule=Host(`blog.karaolidis.com`)"
"traefik.http.routers.root.rule=Host(`karaolidis.com`,`www.karaolidis.com`)"
"traefik.http.routers.root.middlewares=redirect-root-to-blog"
"traefik.http.routers.root.service=noop@internal"
"traefik.http.middlewares.redirect-root-to-blog.redirectregex.regex=^https://(www\.)?karaolidis\.com(/.*)?$"
"traefik.http.middlewares.redirect-root-to-blog.redirectregex.replacement=https://blog.karaolidis.com$${2}"
"traefik.http.middlewares.redirect-root-to-blog.redirectregex.permanent=false"
]; ];
}; };
@@ -47,10 +55,6 @@ in
labels = [ labels = [
"traefik.enable=true" "traefik.enable=true"
"traefik.http.routers.blog-receiver.rule=Host(`blog.karaolidis.com`) && PathPrefix(`/upload`)" "traefik.http.routers.blog-receiver.rule=Host(`blog.karaolidis.com`) && PathPrefix(`/upload`)"
"traefik.http.middlewares.redirect-root-to-blog.redirectregex.regex=^https://(www\.)?karaolidis\.com(/.*)?$"
"traefik.http.middlewares.redirect-root-to-blog.redirectregex.replacement=https://blog.karaolidis.com$${2}"
"traefik.http.middlewares.redirect-root-to-blog.redirectregex.permanent=false"
]; ];
}; };

View File

@@ -89,7 +89,7 @@ in
"email" "email"
"is_admin" "is_admin"
]; ];
pre_configured_consent_duration = "1 month"; pre_configured_consent_duration = "1 year";
} }
]; ];
}; };

View File

@@ -196,7 +196,7 @@ in
client_secret = hmConfig.sops.placeholder."gitea/authelia/digest"; client_secret = hmConfig.sops.placeholder."gitea/authelia/digest";
redirect_uris = [ "https://git.karaolidis.com/user/oauth2/authelia/callback" ]; redirect_uris = [ "https://git.karaolidis.com/user/oauth2/authelia/callback" ];
authorization_policy = "gitea"; authorization_policy = "gitea";
pre_configured_consent_duration = "1 month"; pre_configured_consent_duration = "1 year";
} }
]; ];
}; };

View File

@@ -33,7 +33,7 @@ in
authorization_policy = "admin_one_factor"; authorization_policy = "admin_one_factor";
require_pkce = true; require_pkce = true;
pkce_challenge_method = "S256"; pkce_challenge_method = "S256";
pre_configured_consent_duration = "1 month"; pre_configured_consent_duration = "1 year";
} }
]; ];
} }

View File

@@ -137,7 +137,7 @@ in
"groups" "groups"
"is_admin" "is_admin"
]; ];
pre_configured_consent_duration = "1 month"; pre_configured_consent_duration = "1 year";
} }
]; ];
}; };

View File

@@ -65,7 +65,7 @@ in
]; ];
response_types = [ "code" ]; response_types = [ "code" ];
token_endpoint_auth_method = "client_secret_post"; token_endpoint_auth_method = "client_secret_post";
pre_configured_consent_duration = "1 month"; pre_configured_consent_duration = "1 year";
} }
]; ];
}; };

View File

@@ -64,7 +64,7 @@ in
"offline_access" "offline_access"
]; ];
response_types = [ "code" ]; response_types = [ "code" ];
pre_configured_consent_duration = "1 month"; pre_configured_consent_duration = "1 year";
} }
]; ];
}; };