AZ-Intec-GmbH/AZ-NIX
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

+zammad helpdesk

Browse Source
This commit is contained in:
sascha.koenig 2025-09-09 14:17:29 +02:00
parent e3593466d7
commit 01cd32a1f2
8 changed files with 76 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
home/features/desktop/coding.nix
View File

@ -13,6 +13,7 @@ in {
config = mkIf cfg.enable { config = mkIf cfg.enable {
home.packages = with pkgs; [ home.packages = with pkgs; [
bruno bruno
filezilla
insomnia insomnia
]; ];

8
hosts/AZ-CLD-1/secrets.nix
View File

@ -31,6 +31,14 @@
hetzner-s3-az-intern-access-key = { hetzner-s3-az-intern-access-key = {
file = ../../secrets/hetzner-s3-az-intern-access-key.age; file = ../../secrets/hetzner-s3-az-intern-access-key.age;
}; };
zammad-pw = {
file = ../../secrets/zammad-pw.age;
owner = "zammad";
};
zammad-secret = {
file = ../../secrets/zammad-secret.age;
owner = "zammad";
};
}; };
}; };
} }

1
hosts/AZ-CLD-1/services/default.nix
View File

@ -9,5 +9,6 @@
./postgres.nix ./postgres.nix
./traefik.nix ./traefik.nix
./vaultwarden.nix ./vaultwarden.nix
./zammad.nix
]; ];
} }

6
hosts/AZ-CLD-1/services/postgres.nix
View File

@ -44,6 +44,7 @@
local n8n n8n scram-sha-256 local n8n n8n scram-sha-256
local outline outline scram-sha-256 local outline outline scram-sha-256
local vaultwarden vaultwarden scram-sha-256 local vaultwarden vaultwarden scram-sha-256
local zammad zammad scram-sha-256
# Localhost connections (IPv4 and IPv6) # Localhost connections (IPv4 and IPv6)
host all postgres 127.0.0.1/32 scram-sha-256 host all postgres 127.0.0.1/32 scram-sha-256
@ -58,6 +59,9 @@
host vaultwarden vaultwarden 127.0.0.1/32 scram-sha-256 host vaultwarden vaultwarden 127.0.0.1/32 scram-sha-256
host vaultwarden vaultwarden ::1/128 scram-sha-256 host vaultwarden vaultwarden ::1/128 scram-sha-256
host zammad zammad 127.0.0.1/32 scram-sha-256
host zammad zammad ::1/128 scram-sha-256
# Podman network connections for Baserow # Podman network connections for Baserow
host baserow baserow 10.89.0.0/24 scram-sha-256 host baserow baserow 10.89.0.0/24 scram-sha-256
host kestra kestra 10.89.0.0/24 scram-sha-256 host kestra kestra 10.89.0.0/24 scram-sha-256
@ -72,7 +76,7 @@
services.postgresqlBackup = { services.postgresqlBackup = {
enable = true; enable = true;
startAt = "03:10:00"; startAt = "03:10:00";
databases = ["baserow" "kestra" "librechat_rag" "n8n" "outline" "vaultwarden"]; databases = ["baserow" "kestra" "librechat_rag" "n8n" "outline" "vaultwarden" "zammad"];
}; };
services.pgadmin = { services.pgadmin = {
enable = true; enable = true;

34
hosts/AZ-CLD-1/services/zammad.nix Normal file
View File

@ -0,0 +1,34 @@
{config, ...}:{
services = {
zammad = {
enable = true;
openPorts = false;
port = 3034;
secretKeyBaseFile = "${config.age.secrets.zammad-secret.path}";
database = {
createLocally = false;
port = 5432;
host = "127.0.0.1";
passwordFile = "${config.age.secrets.zammad-pw.path}";
};
};
};
# Traefik configuration specific to littlelink
services.traefik.dynamicConfigOptions.http = {
services.zammad.loadBalancer.servers = [
{
url = "http://localhost:3034/";
}
];
routers.zammad = {
rule = "Host(`help.az-gruppe.com`)";
tls = {
certResolver = "ionos";
};
service = "zammad";
entrypoints = "websecure";
};
};
}

2
secrets.nix
View File

@ -21,4 +21,6 @@ in {
"secrets/pgadmin-pw.age".publicKeys = systems ++ users; "secrets/pgadmin-pw.age".publicKeys = systems ++ users;
"secrets/vaultwarden-env.age".publicKeys = systems ++ users; "secrets/vaultwarden-env.age".publicKeys = systems ++ users;
"secrets/vaultwarden-db.age".publicKeys = systems ++ users; "secrets/vaultwarden-db.age".publicKeys = systems ++ users;
"secrets/zammad-pw.age".publicKeys = systems ++ users;
"secrets/zammad-secret.age".publicKeys = systems ++ users;
} }

11
secrets/zammad-pw.age Normal file
View File

@ -0,0 +1,11 @@
-----BEGIN AGE ENCRYPTED FILE-----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-----END AGE ENCRYPTED FILE-----

14
secrets/zammad-secret.age Normal file
View File

@ -0,0 +1,14 @@
-----BEGIN AGE ENCRYPTED FILE-----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-----END AGE ENCRYPTED FILE-----