refactor: move common modules to modules/ directory

modules/services/caddy.nix

@@ -0,0 +1,25 @@
+{ config, ... }:
+
+{
+  services.caddy = {
+    enable = true;
+    
+    # zipline
+    virtualHosts."i.toast.name".extraConfig = ''
+      reverse_proxy http://127.0.0.1:${toString config.services.zipline.settings.CORE_PORT}
+    '';
+
+    # forgejo
+    virtualHosts."git.toast.name".extraConfig = ''
+      reverse_proxy http://127.0.0.1:${toString config.services.forgejo.settings.server.HTTP_PORT}
+    '';
+
+    # tailscale
+    virtualHosts."vps.curl-pence.ts.net".extraConfig = ''
+      reverse_proxy /vaultwarden/* http://127.0.0.1:${toString config.services.vaultwarden.config.ROCKET_PORT}
+      handle_path /restic/* {
+        reverse_proxy http://${toString config.services.restic.server.listenAddress}
+      }
+    '';
+  };
+}

modules/services/forgejo.nix

@@ -0,0 +1,19 @@
+{
+  services.forgejo = {
+    enable = true;
+    settings = {
+      server = {
+        HTTP_ADDR = "127.0.0.1";
+        HTTP_PORT = 3001;
+        DOMAIN = "git.toast.name";
+        ROOT_URL = "https://git.toast.name/";
+        LANDING_PAGE = "explore";
+      };
+      service.DISABLE_REGISTRATION = true;
+      actions = {
+        ENABLED = true;
+        DEFAULT_ACTIONS_URL = "github";
+      };
+    };
+  };
+}

modules/services/openssh.nix

@@ -0,0 +1,10 @@
+{
+  services.openssh = {
+    enable = true;
+    openFirewall = false;
+    settings = {
+      PasswordAuthentication = false;
+      PermitRootLogin = "prohibit-password";
+    };
+  };
+}

modules/services/restic-rest-server.nix

@@ -0,0 +1,8 @@
+{
+  services.restic.server = {
+    enable = true;
+    appendOnly = true;
+    listenAddress = "127.0.0.1:3003";
+    extraFlags = [ "--no-auth" ];
+  };
+}

modules/services/tailscale.nix

@@ -0,0 +1,10 @@
+{ config, ... }:
+
+{
+  sops.secrets."tailscale/authkey" = { };
+
+  services.tailscale = {
+    enable = true;
+    authKeyFile = config.sops.secrets."tailscale/authkey".path;
+  };
+}

modules/services/trilium-server.nix

@@ -0,0 +1,7 @@
+{
+  services.trilium-server = {
+    enable = true;
+    host = "127.0.0.1";
+    port = 8080;
+  };
+}

modules/services/udisks2.nix

@@ -0,0 +1,3 @@
+{
+  services.udisks2.enable = true;
+}

modules/services/vaultwarden.nix

@@ -0,0 +1,10 @@
+{
+  services.vaultwarden = {
+    enable = true;
+    config = {
+      ROCKET_ADDRESS = "127.0.0.1";
+      ROCKET_PORT = 8222;
+      DOMAIN = "https://vps.curl-pence.ts.net/vaultwarden";
+    };
+  };
+}

modules/services/zerotierone.nix

@@ -0,0 +1,3 @@
+{
+  services.zerotierone.enable = true;
+}

modules/services/zipline.nix

@@ -0,0 +1,13 @@
+{ config, ... }:
+
+{
+  sops.secrets."zipline/env" = { };
+  services.zipline = {
+    enable = true;
+    settings = {
+      CORE_HOSTNAME = "127.0.0.1";
+      CORE_PORT = 3000;
+    };
+    environmentFiles = [ config.sops.secrets."zipline/env".path ];
+  };
+}