jawz/NixOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sonarqube setup

Browse Source
This commit is contained in:
Danilo Reyes 2025-09-18 19:12:44 -06:00
parent 9a269de7c3
commit 5d3d68d0ba
3 changed files with 39 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
hosts/server/configuration.nix
View File

@ -1,4 +1,4 @@
{ config, ... }: { pkgs, config, ... }:
{ {
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
@ -14,6 +14,7 @@
9999 # stash 9999 # stash
8384 # syncthing 8384 # syncthing
5201 # vps speed test 5201 # vps speed test
3452 # sonarqube
config.my.servers.audiobookshelf.port config.my.servers.audiobookshelf.port
config.my.servers.bazarr.port config.my.servers.bazarr.port
config.my.servers.collabora.port config.my.servers.collabora.port
@ -82,7 +83,9 @@
users = { users = {
groups.nixremote.gid = 555; groups.nixremote.gid = 555;
users = { users = {
# jawz.packages = [ pkgs.stash ]; jawz.packages = builtins.attrValues {
inherit (pkgs) stash podman-compose;
};
nixremote = { nixremote = {
isNormalUser = true; isNormalUser = true;
createHome = true; createHome = true;

32
hosts/server/hardware-configuration.nix
View File

@ -5,6 +5,32 @@ in
{ {
imports = [ (modulesPath + "/installer/scan/not-detected.nix") ]; imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
hardware.cpu.intel.updateMicrocode = lib.mkDefault true; hardware.cpu.intel.updateMicrocode = lib.mkDefault true;
security.pam.loginLimits = [
{
domain = "*";
type = "hard";
item = "nofile";
value = "131072";
}
{
domain = "*";
type = "soft";
item = "nofile";
value = "131072";
}
{
domain = "*";
type = "hard";
item = "nproc";
value = "8192";
}
{
domain = "*";
type = "soft";
item = "nproc";
value = "8192";
}
];
boot = { boot = {
loader = { loader = {
efi = { efi = {
@ -38,7 +64,11 @@ in
}; };
}; };
kernelModules = [ "kvm-intel" ]; kernelModules = [ "kvm-intel" ];
kernel.sysctl."vm.swappiness" = 80; kernel.sysctl = {
"vm.swappiness" = 80;
"vm.max_map_count" = 524288;
"fs.file-max" = 131072;
};
extraModulePackages = [ ]; extraModulePackages = [ ];
initrd = { initrd = {
availableKernelModules = [ availableKernelModules = [

3
modules/servers/postgres.nix
View File

@ -36,6 +36,7 @@ let
"firefly-iii" "firefly-iii"
"matrix-synapse" "matrix-synapse"
"readeck" "readeck"
"sonarqube"
]; ];
in in
{ {
@ -44,6 +45,7 @@ in
environment.systemPackages = [ upgrade-pg-cluster ]; environment.systemPackages = [ upgrade-pg-cluster ];
services.postgresql = { services.postgresql = {
enable = true; enable = true;
enableTCPIP = true;
ensureDatabases = dbNames; ensureDatabases = dbNames;
package = pkgs.postgresql_17; package = pkgs.postgresql_17;
ensureUsers = map (name: { ensureUsers = map (name: {
@ -54,6 +56,7 @@ in
local all all trust local all all trust
host all all ${config.my.localhost}/32 trust host all all ${config.my.localhost}/32 trust
host all all ::1/128 trust host all all ::1/128 trust
host all all 10.88.0.0/16 scram-sha-256
''; '';
}; };
}; };