Add manuela to Wireguard peers

This reverts commit 6d9a883361.

README.org

@@ -1,3 +1,17 @@
 * Unit
 
 Declarative configuration for the main server, using [[https://nixos.org][NixOS]]
+
+** Modules
+
+ The configuration is sliced into different files, per category:
+
+ - ZFS pool configuration: hardware-configuration.nix
+ - Network configuration: networking.nix
+ - Synchronization and backup services: datasync.nix
+ - Web services and reverse proxy: webstack.nix
+ - Smartd: monitoring.nix
+ - Systemd services and timers: periodic.nix
+ - Virtual machines: virtualization.nix
+
+ All the modules are imported in *configuration.nix*

modules/datasync.nix

@@ -7,7 +7,6 @@
   services.samba = {
     enable = true;
     nsswins = true;
-    syncPasswordsByPam = true;
     extraConfig = ''
       workgroup = WORKGROUP
       server string = unit

modules/hardware-configuration.nix

@@ -43,18 +43,13 @@
       fsType = "zfs";
     };
 
-  fileSystems."/vault/backups" =
-    { device = "vault/backups";
-      fsType = "zfs";
-    };
-
   fileSystems."/vault/VMs" =
     { device = "vault/VMs";
       fsType = "zfs";
     };
 
-  fileSystems."/vault/code" =
+  fileSystems."/vault/backups" =
-    { device = "vault/code";
+    { device = "vault/backups";
       fsType = "zfs";
     };
 
@@ -63,8 +58,8 @@
       fsType = "zfs";
     };
 
-  fileSystems."/vault/config" =
+  fileSystems."/vault/code" =
-    { device = "vault/config";
+    { device = "vault/code";
       fsType = "zfs";
     };
 
@@ -78,13 +73,8 @@
       fsType = "zfs";
     };
 
-  fileSystems."/vault/backups/documents" =
+  fileSystems."/vault/backups/wordpress" =
-    { device = "vault/backups/documents";
+    { device = "vault/backups/wordpress";
-      fsType = "zfs";
-    };
-
-  fileSystems."/vault/VMs/legacy" =
-    { device = "vault/VMs/legacy";
       fsType = "zfs";
     };
 
@@ -93,8 +83,23 @@
       fsType = "zfs";
     };
 
-  fileSystems."/vault/backups/wordpress" =
+  fileSystems."/vault/backups/documents" =
-    { device = "vault/backups/wordpress";
+    { device = "vault/backups/documents";
+      fsType = "zfs";
+    };
+
+  fileSystems."/vault/config" =
+    { device = "vault/config";
+      fsType = "zfs";
+    };
+
+  fileSystems."/vault/VMs/legacy" =
+    { device = "vault/VMs/legacy";
+      fsType = "zfs";
+    };
+
+  fileSystems."/vault/frontend" =
+    { device = "vault/frontend";
       fsType = "zfs";
     };
 

modules/networking.nix

@@ -103,6 +103,11 @@ in {
           publicKey = "5DU9ipxJcut2wKrUr3yQux9crzXMSW4ZeKWFLRpUc1I=";
           allowedIPs = [ "10.9.0.4/32" ];
         }
+        # manuela
+        {
+          publicKey = "V+DaOya2hLuV6C9BeCkDyFqXpPAFq9jMAeg1dvQw/FI=";
+          allowedIPs = [ "10.9.0.5/32" ];
+        }
       ];
     };
   };

modules/periodic.nix

@@ -16,7 +16,7 @@ in {
       ls | xargs -P10 -I{} git -C {} pull --rebase
     '';
     serviceConfig.Type = "oneshot";
-    OnCalendar = "22:00:00";
+    startAt = "22:00:00";
   };
 
   # PostgreSQL daily backups

modules/webstack.nix

@@ -42,41 +42,13 @@
         forceSSL = true;
       };
     };
-    virtualHosts = {
-      "frontend.coace.duckdns.org" = {
-        enableACME = true;
-        forceSSL = true;
-        root = "/vault/backups/frontend/inetpub/wwwroot";
-        locations = {
-          "/few/".extraConfig = ''
-            fastcgi_index Default.aspx;
-            fastcgi_pass 127.0.0.1:9000;
-            fastcgi_param SCRIPT_FILENAME $document_root/few/$fastcgi_script_name;
-            fastcgi_param PATH_INFO "";
-            fastcgi-mono-server4 /applications=/few/:/vault/backups/frontend/inetpub/wwwroot/few/socket=tcp:127.0.0.1:9000;
-            include ${pkgs.nginx}/conf/fastcgi_params;
-          '';
-          "/gcw/".extraConfig = ''
-            fastcgi_index Default.aspx;
-            fastcgi_pass 127.0.0.1:9000;
-            fastcgi_param SCRIPT_FILENAME $document_root/few/$fastcgi_script_name;
-            fastcgi_param PATH_INFO "";
-            fastcgi-mono-server4 /applications=/gcw/:/vault/backups/frontend/inetpub/wwwroot/gcw/socket=tcp:127.0.0.1:9000;
-            include ${pkgs.nginx}/conf/fastcgi_params;
-          '';
-        };
-      };
-    };
   };
 
   # ACME certs configuration
   security.acme = {
     acceptTerms = true;
     email = "secretario@arquitectosdeceuta.com";
-    certs."coace.duckdns.org" = {
+    certs."coace.duckdns.org".webroot = "/var/lib/acme/acme-challenge";
-      webroot = "/var/lib/acme/acme-challenge";
-      extraDomainNames = [ "frontend.coace.duckdns.org" ];
-    };
   };
 
   # Generate dhparams