Files
AZ-NIX-SERVERS/hosts/common/ports.nix
T
m3ta-chiron f1481dc256 feat: AtroPIM deployment config for AZ-PRM-1 (AZ-NIX-ava.2)
- port registry: atrocore = 3058
- oci-container atrocore: Gitea-registry image, 127.0.0.1:3058:80,
  web network, static ip 10.89.0.16, db alias to host pg, env-file
  from agenix, named volume for instance data, registry login via
  token secret
- agenix secrets: atrocore-env (ATRO_DB_*) + atrocore-registry-token,
  age-encrypted to AZ-PRM-1 + user, non-interactive creation
- host postgres 17: idempotent atrocore-db-init oneshot (psql peer,
  secret only at runtime), pg_hba 10.89.0.0/24 scram-sha-256,
  atrocore in 03:10 backup list
- traefik: pim.l.az-gruppe.com -> localhost:3058 (ionos, websecure)
2026-08-17 13:45:21 +02:00

86 lines
1.7 KiB
Nix

{config, ...}: {
m3ta.ports = {
enable = true;
definitions = {
ssh = 2022;
traefik = 80;
traefik-ssl = 443;
gitea = 3030;
outline = 3031;
vaultwarden = 3032;
ntfy-sh = 3033;
zammad = 3034;
it-tools = 3035;
zammad-hr = 3036;
zammad-hr-elasticsearch = 3037;
netbird = 3038;
azion-scheduler = 3039;
azion-scheduler-proxy = 3049;
phishboard = 3055;
homarr = 3057;
atrocore = 3058;
metabase = 3013;
baserow = 3050;
frappe-lms = 3052;
snipe-it = 3053;
azess = 3054;
librechat = 3040;
librechat-dev = 3141;
rag-api = 8000;
rag-api-dev = 8100;
litellm = 4000;
n8n = 5678;
netbox = 8001;
netbox-static = 8002;
kestra = 5080;
kestra-metrics = 5081;
zugferd-service = 5060;
gotenberg = 5070;
portainer = 9000;
postgres = 5432;
pgbouncer-tx = 6432;
pgbouncer-session = 6433;
pgadmin = 5050;
mysql = 3306;
# Observability stack (AZ-PRM-1)
grafana = 3060;
prometheus = 9090;
loki = 3100;
alloy = 12345;
node-exporter = 9100;
blackbox-exporter = 9115;
};
hostOverrides = {
AZ-CLD-1 = {
baserow = 3050;
librechat-dev = 3141;
rag-api-dev = 8100;
};
AZ-PRM-1 = {
baserow = 3051;
kestra = 5080;
stirling-pdf = 3032;
bpi = 3033;
excalidraw = 3034;
online3dviewer = 3035;
};
};
};
environment.etc."info/all-ports.json".text = builtins.toJSON {
hostname = config.networking.hostName;
ports = config.m3ta.ports.all;
};
}