docs: improve readme with domains and key gen info

This commit is contained in:
Jet 2026-02-16 22:39:22 -08:00
parent 55876f2828
commit 899b70fcfc

View file

@ -3,17 +3,20 @@
nixos config for the hetzner vps. nixos config for the hetzner vps.
services: services:
- forgejo (git) - forgejo (git.extremist.software)
- stalwart (mail) - stalwart (mail.extremist.software)
- searx (search) - searx (search.extremist.software)
- conduit (matrix) - conduit (matrix.extremist.software)
- minecraft (fabric + optimization mods) - minecraft (extremist.software)
- caddy (reverse proxy) - caddy (reverse proxy)
- grafana/prometheus (monitoring) - grafana/prometheus (status.extremist.software)
deploy: deploy:
`nix run github:nix-community/nixos-anywhere -- --flake .#extremist-software --impure root@<ip>` `nix run github:nix-community/nixos-anywhere -- --flake .#extremist-software --impure root@<ip>`
secrets: secrets:
copy `secrets.nix.example` to `secrets.nix` and fill it in. 1. copy `secrets.nix.example` to `secrets.nix`.
repo uses impure build cause i dont want to manage encrypted secret files in git right now. 2. fill in values (generate random keys for searx/tailscale).
3. `tailscaleKey` must be a **reusable** key.
repo uses `impure` build to load `secrets.nix` directly. no encrypted secrets in git.