60 lines
1.5 KiB
Nix
60 lines
1.5 KiB
Nix
{
|
|
inputs,
|
|
config,
|
|
pkgs,
|
|
...
|
|
}:
|
|
{
|
|
imports = [
|
|
inputs.self.nixosModules.inventree
|
|
];
|
|
|
|
nixpkgs.overlays = [
|
|
inputs.self.overlays.packagesOverlay
|
|
];
|
|
|
|
clan.core.vars.generators.inventree = {
|
|
files = {
|
|
secret-key = {
|
|
owner = "inventree";
|
|
group = "inventree";
|
|
secret = true;
|
|
};
|
|
oidc-key = {
|
|
owner = "inventree";
|
|
group = "inventree";
|
|
secret = true;
|
|
};
|
|
admin-password = {
|
|
owner = "inventree";
|
|
group = "inventree";
|
|
secret = true;
|
|
};
|
|
};
|
|
runtimeInputs = [
|
|
pkgs.pwgen
|
|
pkgs.xkcdpass
|
|
];
|
|
script = ''
|
|
pwgen -s 32 1 > $out/secret-key
|
|
pwgen -s 32 1 > $out/oidc-key
|
|
xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/admin-password
|
|
'';
|
|
};
|
|
|
|
networking.firewall.allowedTCPPorts = [ 80 ];
|
|
|
|
services.inventree = {
|
|
enable = true;
|
|
hostName = "hadar.local";
|
|
config.site_url = "http://${config.services.inventree.hostName}";
|
|
secretKeyFile = config.clan.core.vars.generators.inventree.files.secret-key.path;
|
|
config.oidc_private_key_file = config.clan.core.vars.generators.inventree.files.oidc-key.path;
|
|
config.adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
|
|
};
|
|
|
|
system.stateVersion = "25.11";
|
|
clan.core.sops.defaultGroups = [ "admins" ];
|
|
clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
|
|
}
|