diff options
| author | Franck Cuny <franck@fcuny.net> | 2022-04-06 12:27:49 -0700 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2022-04-06 12:27:49 -0700 |
| commit | 719df0add2cf9c2118cda737ec535d83f2b1e24e (patch) | |
| tree | 9c684ad999a42f168aa1eee8b9eb1dd83a61d854 | |
| parent | import navidrome with other services (diff) | |
| download | world-719df0add2cf9c2118cda737ec535d83f2b1e24e.tar.gz | |
refactor unifi to a module
| -rw-r--r-- | hosts/profiles/nas.nix | 2 | ||||
| -rw-r--r-- | modules/services/default.nix | 12 | ||||
| -rw-r--r-- | modules/services/unifi/default.nix (renamed from hosts/common/server/unifi.nix) | 8 |
3 files changed, 18 insertions, 4 deletions
diff --git a/hosts/profiles/nas.nix b/hosts/profiles/nas.nix index aaeee75..33fd6b5 100644 --- a/hosts/profiles/nas.nix +++ b/hosts/profiles/nas.nix @@ -6,7 +6,6 @@ ../common/server/grafana.nix ../common/server/traefik.nix ../common/server/transmission.nix - ../common/server/unifi.nix ../common/server/gitea.nix ../common/server/rclone.nix ]; @@ -27,6 +26,7 @@ enable = true; musicFolder = "/data/fast/music"; }; + unifi = { enable = true; }; }; services.restic.backups = { diff --git a/modules/services/default.nix b/modules/services/default.nix index 637e60f..8da870e 100644 --- a/modules/services/default.nix +++ b/modules/services/default.nix @@ -1,6 +1,14 @@ { ... }: { - imports = - [ ./navidrome ./samba ./ssh-server ./tailscale ./thermald ./tlp ./fwupd ]; + imports = [ + ./fwupd + ./navidrome + ./samba + ./ssh-server + ./tailscale + ./thermald + ./tlp + ./unifi + ]; } diff --git a/hosts/common/server/unifi.nix b/modules/services/unifi/default.nix index ab32cec..af7b059 100644 --- a/hosts/common/server/unifi.nix +++ b/modules/services/unifi/default.nix @@ -1,6 +1,7 @@ { config, lib, pkgs, ... }: let + cfg = config.my.services.unifi; allowedRules = { # https://help.ubnt.com/hc/en-us/articles/218506997 allowedTCPPorts = [ @@ -8,6 +9,7 @@ let 8880 # Port for HTTP portal redirect, if guest portal is enabled. 8843 # Port for HTTPS portal redirect, ditto. 6789 # Port for UniFi mobile speed test. + 9130 # Port for the prometheus exporter ]; allowedUDPPorts = [ 3478 # UDP port used for STUN. @@ -15,7 +17,11 @@ let ]; }; in { - config = { + options.my.services.unifi = with lib; { + enable = mkEnableOption "Unifi controller"; + }; + + config = lib.mkIf cfg.enable { networking.firewall = allowedRules; users.users.unifi.group = "unifi"; users.users.unifi.isSystemUser = true; |