Tailscale on sebby

common/fragments/grocy.nix

@@ -3,7 +3,7 @@
   services.grocy = {
     enable = true;
     hostName = "grocy.home.nora.codes";
-    dataDir = "/mnt/Grocy";
+    dataDir = "/var/lib/grocy/";
     nginx.enableSSL = false;
     settings = {
       calendar.firstDayOfWeek = 1; # Monday

hosts/felonyspork/configuration.nix

@@ -70,14 +70,23 @@
     "mnt-moria.mount"
   ];
 
-  systemd.services.grocy.after = [
+  systemd.services.phpfpm-grocy.after = [
     "mnt-Grocy.mount"
   ];
 
-  systemd.services.grocy.requires= [
+  systemd.services.phpfpm-grocy.requires= [
     "mnt-Grocy.mount"
   ];
 
+  # Backups for grocy
+  services.borgbackup.jobs.grocy = {
+    paths = config.services.grocy.dataDir;
+    encryption.mode = "none";
+    repo = "/mnt/Grocy";
+    compression = "auto,zstd";
+    startAt = "daily";
+  };
+
   # Enable DigitalOcean dynamic DNS
   systemd.services.do_dyndns = {
     enable = true;

hosts/semaphorebravo/configuration.nix

@@ -14,6 +14,7 @@
       ../../common/fragments/unifi.nix
       ../../common/fragments/prometheus_exporters.nix
       ../../common/fragments/mosh.nix
+      ../../common/fragments/tailscale.nix
     ];
 
   # Bootloader.

ops/home/ssh_config

@@ -1,8 +1,15 @@
+Host *
+  AddKeysToAgent yes
+  IdentitiesOnly yes
+  User nora
+  ForwardAgent yes
+
 Host felonyspork
-  HostName home.nora.codes
+  HostName felonyspork.goblin-arctic.ts.net
 
 Host crimespoon
-  HostName 192.168.88.168
+  HostName crimespoon
+  ProxyJump felonyspork
 
 Host semaphorebravo
-  HostName 10.0.0.2
+  HostName semaphorebrave.goblin-arctic.ts.net