summary refs log tree commit diff stats
path: root/system
diff options
context:
space:
mode:
Diffstat (limited to 'system')
-rw-r--r--system/linde.nix3
-rw-r--r--system/mba.nix1
-rw-r--r--system/settings/dev.nix3
-rw-r--r--system/settings/programs/docker.nix5
-rw-r--r--system/settings/services/git-server.nix21
5 files changed, 15 insertions, 18 deletions
diff --git a/system/linde.nix b/system/linde.nix
index c0af9144..ee680eb0 100644
--- a/system/linde.nix
+++ b/system/linde.nix
@@ -943,6 +943,9 @@ in
     enable = true;
     initialClusterState = "existing";
     dataDir = "/var/lib/etcd"; # TODO backup
+    extraConf = {
+      AUTO_COMPACTION_RETENTION = "1h";
+    };
   };
 
   services.dex =
diff --git a/system/mba.nix b/system/mba.nix
index cc8c81da..b1a17922 100644
--- a/system/mba.nix
+++ b/system/mba.nix
@@ -14,7 +14,6 @@
   networking = {
     hostName = "mba";
   };
-  services.tailscale.enable = true;
 
   services.activate-system.enable = true;
 
diff --git a/system/settings/dev.nix b/system/settings/dev.nix
index 7d2e6193..b1817914 100644
--- a/system/settings/dev.nix
+++ b/system/settings/dev.nix
@@ -1,9 +1,6 @@
 { ... }: {
   services.caddy = {
     enable = true;
-    globalConfig = ''
-      auto_https disable_redirects
-    '';
     virtualHosts =
       let
         local_tls = ''
diff --git a/system/settings/programs/docker.nix b/system/settings/programs/docker.nix
index 29c2ac73..bbe0e4fc 100644
--- a/system/settings/programs/docker.nix
+++ b/system/settings/programs/docker.nix
@@ -18,9 +18,4 @@
       };
     };
   };
-  # TODO: autoPrune doesn't affect rootless
-  # systemd.timers.docker-prune.timerConfig = {
-  #   Persistent = true;
-  #   RandomizedDelaySec = 1800;
-  # };
 }
diff --git a/system/settings/services/git-server.nix b/system/settings/services/git-server.nix
index e8fe6360..72c441f5 100644
--- a/system/settings/services/git-server.nix
+++ b/system/settings/services/git-server.nix
@@ -64,13 +64,16 @@ let
   mkMirrorWants = repo: map (target: "mirror-to-${target}@${repo}.path");
 in
 {
-  services.fcgiwrap = {
-    enable = true;
-    user = "gitolite";
-    group = "gitolite";
-    preforkProcesses = 2;
-    socketType = "tcp6";
-    socketAddress = "[::1]:9000";
+  services.fcgiwrap.gitolite = {
+    process = {
+      user = "gitolite";
+      group = "gitolite";
+      prefork = 2;
+    };
+    socket = {
+      type = "tcp6";
+      address = "[::1]:9000";
+    };
   };
   services.gitolite = {
     enable = true;
@@ -114,8 +117,8 @@ in
   services.caddy.virtualHosts = {
     "git.alanpearce.eu" =
       let
-        fcgi = config.services.fcgiwrap;
-        fcgisocket = "${fcgi.socketType}/${fcgi.socketAddress}";
+        fcgi = config.services.fcgiwrap.gitolite;
+        fcgisocket = "${fcgi.socket.type}/${fcgi.socket.address}";
       in
       {
         useACMEHost = "alanpearce.eu";