hosts/physique/hyponix/services/fail2ban.nix

@@ -2,10 +2,6 @@
 {
   services.fail2ban = {
     enable = true;
-
-    ignoreIP = [
-      "zamok.crans.org"
-    ];
   };
 
   services.openssh.settings.LogLevel = "VERBOSE";

modules/available/vaultwarden.nix

@@ -1,34 +0,0 @@
-{ config, ... }:
-let
-  domain = "pass.${config.networking.domain}";
-in
-{
-
-  age.secrets = {
-    vaultwarden_secret = {
-      file = ../../secrets/services/vaultwarden.age;
-      owner = "vaultwarden";
-    };
-  };
-
-
-  services.vaultwarden = {
-    enable = false; # TODO: enable
-    # TODO: move to pgsql
-    #dbBackend = "postgresql";
-    environmentFile = config.age.secrets.vaultwarden_secret.path;
-    config = {
-      DOMAIN = "https://${domain}";
-      SIGNUPS_ALLOWED = false;
-      
-      ROCKET_ADDRESS = "::1";
-      ROCKET_PORT = 8222;
-    };
-  };
-
-  services.caddy.virtualHosts."${domain}" = {
-    extraConfig = ''
-      			reverse_proxy localhost:${builtins.toString config.services.vaultwarden.config.ROCKET_PORT}
-      		'';
-  };
-}

modules/common/monitoring.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ ... }:
 {
   services.prometheus.exporters = {
     node = {
@@ -9,19 +9,6 @@
         "--collector.softirqs"
         "--collector.tcpstat"
       ];
-
-      openFirewall = true;
-    };
-
-    postgres = {
-      enable = config.services.postgresql.enable;
     };
   };
-
-
-  services.caddy.globalConfig = "
-      metrics {
-        per_host
-      }
-    ";
 }

tools/devshell.nix

@@ -8,7 +8,7 @@ pkgs.mkShell {
   packages = with pkgs; [
     nil
     nixpkgs-fmt
-    agenix.packages.${stdenv.hostPlatform.system}.default
+    agenix.packages.${system}.default
   ];
 
   shellHook = ''