diff options
author | Franck Cuny <franck@fcuny.net> | 2022-04-06 12:27:49 -0700 |
---|---|---|
committer | Franck Cuny <franck@fcuny.net> | 2022-04-06 12:27:49 -0700 |
commit | 719df0add2cf9c2118cda737ec535d83f2b1e24e (patch) | |
tree | 9c684ad999a42f168aa1eee8b9eb1dd83a61d854 /hosts/common/server | |
parent | import navidrome with other services (diff) | |
download | world-719df0add2cf9c2118cda737ec535d83f2b1e24e.tar.gz |
refactor unifi to a module
Diffstat (limited to 'hosts/common/server')
-rw-r--r-- | hosts/common/server/unifi.nix | 81 |
1 files changed, 0 insertions, 81 deletions
diff --git a/hosts/common/server/unifi.nix b/hosts/common/server/unifi.nix deleted file mode 100644 index ab32cec..0000000 --- a/hosts/common/server/unifi.nix +++ /dev/null @@ -1,81 +0,0 @@ -{ config, lib, pkgs, ... }: - -let - allowedRules = { - # https://help.ubnt.com/hc/en-us/articles/218506997 - allowedTCPPorts = [ - 8080 # Port for UAP to inform controller. - 8880 # Port for HTTP portal redirect, if guest portal is enabled. - 8843 # Port for HTTPS portal redirect, ditto. - 6789 # Port for UniFi mobile speed test. - ]; - allowedUDPPorts = [ - 3478 # UDP port used for STUN. - 10001 # UDP port used for device discovery. - ]; - }; -in { - config = { - networking.firewall = allowedRules; - users.users.unifi.group = "unifi"; - users.users.unifi.isSystemUser = true; - users.groups.unifi = { }; - - services.unifi = { - enable = true; - openPorts = true; - unifiPackage = pkgs.unifiStable; - }; - - age.secrets.unifi-read-only = { - file = ../../../secrets/unifi/unifi-poller.age; - mode = "0400"; - owner = "unifi-poller"; - }; - - services.unifi-poller = { - enable = true; - - unifi.defaults = { - url = "https://127.0.0.1:8443"; - user = "unifipoller"; - pass = config.age.secrets.unifi-read-only.path; - - verify_ssl = false; - }; - - influxdb.disable = true; - - prometheus = { http_listen = ":9130"; }; - }; - - systemd.services.unifi-available = { - description = "Wait for Unifi to be available"; - after = [ "unifi.service" ]; - before = [ "unifi-poller.service" ]; - wantedBy = [ "unifi-poller.service" ]; - serviceConfig = { - ExecStart = - "${pkgs.curl}/bin/curl --insecure 'https://localhost:8443/'"; - Restart = "on-failure"; - RestartSec = "10"; - Type = "oneshot"; - }; - }; - - age.secrets.restic-repo-systems.file = - ../../../secrets/restic/repo-systems.age; - - services.restic.backups = { - unifi = { - paths = [ "/var/lib/unifi" ]; - repository = "/data/slow/backups/systems"; - passwordFile = config.age.secrets.restic-repo-systems.path; - initialize = true; - timerConfig = { OnCalendar = "00:45"; }; - extraBackupArgs = [ "--tag unifi" ]; - pruneOpts = [ "--keep-daily 7" "--keep-weekly 4" ]; - }; - }; - }; -} |