1 files changed, 108 insertions, 50 deletions

diff --git a/hosts/saklas/default.nix b/hosts/saklas/default.nix
index 0ea3474..bd738ca 100644
--- a/hosts/saklas/default.nix
+++ b/hosts/saklas/default.nix
@@ -1,4 +1,10 @@
-{ config, lib, pkgs, inputs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  inputs,
+  ...
+}:
 
 {
   imports = [
@@ -38,8 +44,17 @@
     wireless.enable = false;
 
     firewall = {
-      allowedTCPPorts = [ 22 80 443 5222 5269 ];
-      allowedUDPPorts = [ 3478 51820 ];
+      allowedTCPPorts = [
+        22
+        80
+        443
+        5222
+        5269
+      ];
+      allowedUDPPorts = [
+        3478
+        51820
+      ];
     };
   };
 
@@ -52,10 +67,16 @@
         "95.217.18.52/32"
         "2a01:4f9:c010:a653::1/64"
       ];
-      dns = [ "185.12.64.1" "185.12.64.2" ];
+      dns = [
+        "185.12.64.1"
+        "185.12.64.2"
+      ];
       routes = [
         { Destination = "172.31.1.1"; }
-        { Gateway = "172.31.1.1"; GatewayOnLink = true; }
+        {
+          Gateway = "172.31.1.1";
+          GatewayOnLink = true;
+        }
       ];
     };
   };
@@ -70,7 +91,10 @@
   };
 
   # enable flakes and nix cli
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
 
   # user accounts
   users.users.root.openssh.authorizedKeys.keys = [
@@ -133,7 +157,11 @@
 
         "xmpp.vineetk.net" = {
           group = config.services.prosody.group;
-          extraDomainNames = [ "vineetk.net" "muc.vineetk.net" "u.vineetk.net" ];
+          extraDomainNames = [
+            "vineetk.net"
+            "muc.vineetk.net"
+            "u.vineetk.net"
+          ];
           reloadServices = [ "prosody" ];
         };
       };
@@ -142,11 +170,13 @@
     # I prefer doas over sudo for simplicity
     doas = {
       enable = true;
-      extraRules = [{
-        users = [ "vin" ];
-        keepEnv = true;
-        persist = true;
-      }];
+      extraRules = [
+        {
+          users = [ "vin" ];
+          keepEnv = true;
+          persist = true;
+        }
+      ];
     };
 
     sudo.enable = false;
@@ -169,12 +199,36 @@
         dns = {
           base_domain = "epistemia";
           extra_records = [
-            { name = "invidious.demiurge.epistemia"; type = "A"; value = "100.64.0.2"; }
-            { name = "llm.demiurge.epistemia"; type = "A"; value = "100.64.0.2"; }
-            { name = "navidrome.demiurge.epistemia"; type = "A"; value = "100.64.0.2"; }
-            { name = "redlib.demiurge.epistemia"; type = "A"; value = "100.64.0.2"; }
-            { name = "sdui.demiurge.epistemia"; type = "A"; value = "100.64.0.2"; }
-            { name = "searx.demiurge.epistemia"; type = "A"; value = "100.64.0.2"; }
+            {
+              name = "invidious.demiurge.epistemia";
+              type = "A";
+              value = "100.64.0.2";
+            }
+            {
+              name = "llm.demiurge.epistemia";
+              type = "A";
+              value = "100.64.0.2";
+            }
+            {
+              name = "navidrome.demiurge.epistemia";
+              type = "A";
+              value = "100.64.0.2";
+            }
+            {
+              name = "redlib.demiurge.epistemia";
+              type = "A";
+              value = "100.64.0.2";
+            }
+            {
+              name = "sdui.demiurge.epistemia";
+              type = "A";
+              value = "100.64.0.2";
+            }
+            {
+              name = "searx.demiurge.epistemia";
+              type = "A";
+              value = "100.64.0.2";
+            }
           ];
         };
         logtail.enabled = false;
@@ -199,7 +253,7 @@
       ssl.cert = config.security.acme.certs."xmpp.vineetk.net".directory + "/full.pem";
       ssl.key = config.security.acme.certs."xmpp.vineetk.net".directory + "/key.pem";
 
-      muc = [{ domain = "muc.vineetk.net"; }];
+      muc = [ { domain = "muc.vineetk.net"; } ];
       virtualHosts.vineetk = {
         domain = "vineetk.net";
         enabled = true;
@@ -233,7 +287,7 @@
           locations."/" = {
             proxyPass = "http://127.0.0.1:5232/";
             extraConfig = ''
-                proxy_pass_header Authorization;
+              proxy_pass_header Authorization;
             '';
           };
         };
@@ -321,52 +375,56 @@
   mailserver = {
     enable = true;
     fqdn = "mail.vineetk.net";
-    domains = [ "vineetk.net" "vinbiz.ca" "13f0.net" ];
+    domains = [
+      "vineetk.net"
+      "vinbiz.ca"
+      "13f0.net"
+    ];
 
     # A list of all login accounts. To create the password hashes, use
     # nix-shell -p mkpasswd --run 'mkpasswd -sm bcrypt'
     loginAccounts = {
       "vineet@vineetk.net" = {
         hashedPasswordFile = config.age.secrets.email_vineetk.path;
-        aliases = ["@vineetk.net"];
+        aliases = [ "@vineetk.net" ];
       };
 
       "kar@13f0.net" = {
         hashedPasswordFile = config.age.secrets.email_13f0.path;
-        aliases = ["@13f0.net"];
+        aliases = [ "@13f0.net" ];
         sieveScript = ''
-require [ "fileinto", "mailbox" ];
-
-if address :matches [ "to", "cc" ] "announce@openbsd.org" {
-        fileinto :create "openbsd_announce";
-        stop;
-}
-if address :matches [ "to", "cc" ] "arm@openbsd.org" {
-        fileinto :create "openbsd_arm";
-        stop;
-}
-if address :matches [ "to", "cc" ] "misc@openbsd.org" {
-        fileinto :create "openbsd_misc";
-        stop;
-}
-if address :matches [ "to", "cc" ] "misc@opensmtpd.org" {
-        fileinto :create "opensmtpd_misc";
-        stop;
-}
-if address :matches [ "to", "cc" ] "oss-security@lists.openwall.com" {
-        fileinto :create "oss_security";
-        stop;
-}
-if address :matches [ "to", "cc" ] "tuhs@tuhs.org" {
-        fileinto :create "tuhs";
-        stop;
-}
+          require [ "fileinto", "mailbox" ];
+
+          if address :matches [ "to", "cc" ] "announce@openbsd.org" {
+                fileinto :create "openbsd_announce";
+                stop;
+          }
+          if address :matches [ "to", "cc" ] "arm@openbsd.org" {
+                fileinto :create "openbsd_arm";
+                stop;
+          }
+          if address :matches [ "to", "cc" ] "misc@openbsd.org" {
+                fileinto :create "openbsd_misc";
+                stop;
+          }
+          if address :matches [ "to", "cc" ] "misc@opensmtpd.org" {
+                fileinto :create "opensmtpd_misc";
+                stop;
+          }
+          if address :matches [ "to", "cc" ] "oss-security@lists.openwall.com" {
+                fileinto :create "oss_security";
+                stop;
+          }
+          if address :matches [ "to", "cc" ] "tuhs@tuhs.org" {
+                fileinto :create "tuhs";
+                stop;
+          }
         '';
       };
 
       "vineet@vinbiz.ca" = {
         hashedPasswordFile = config.age.secrets.email_vinbiz.path;
-        aliases = ["postmaster@vinbiz.ca"];
+        aliases = [ "postmaster@vinbiz.ca" ];
       };
       "suresh@vinbiz.ca".hashedPasswordFile = config.age.secrets.email_vinbiz.path;
       "revathy@vinbiz.ca".hashedPasswordFile = config.age.secrets.email_vinbiz.path;