diff --git a/hosts/nixos/nfss/containers.nix b/hosts/nixos/nfss/containers.nix index 2479f68..df850f1 100644 --- a/hosts/nixos/nfss/containers.nix +++ b/hosts/nixos/nfss/containers.nix @@ -10,15 +10,5 @@ in # Container definitions for nfss host virtualisation.oci-containers.containers = { - mongodb = { - image = "docker.io/mongo:7"; - volumes = [ "/var/lib/mongodb:/data/db" ]; - environment = { TZ = systemTZ; }; - environmentFiles = [ "/etc/mongodb-env" ]; - ports = [ "27017:27017" ]; - extraOptions = [ "--network=podman" ]; - autoStart = true; - }; - }; } diff --git a/hosts/nixos/nfss/system.nix b/hosts/nixos/nfss/system.nix index abcbbbd..89de35b 100644 --- a/hosts/nixos/nfss/system.nix +++ b/hosts/nixos/nfss/system.nix @@ -136,10 +136,9 @@ # Borg backup configuration services.borg-client-custom = { - enable = true; + enable = false; repositoryUrl = "ssh://borg-box/./nfss"; backupPaths = [ - "/var/lib/mongodb" ]; backupFrequency = "*-*-* 01:00:00"; retention = { diff --git a/hosts/nixos/vps/proxy.nix b/hosts/nixos/vps/proxy.nix index 9087b4f..065bf22 100644 --- a/hosts/nixos/vps/proxy.nix +++ b/hosts/nixos/vps/proxy.nix @@ -44,20 +44,5 @@ }; - tcp = { - routers.mongodb = { - rule = "HostSNI(`mongodb.yanlincs.com`)"; - service = "mongodb"; - entrypoints = [ "mongodb" ]; - tls = { - certResolver = "cloudflare"; - domains = [{ main = "*.yanlincs.com"; }]; - }; - }; - services.mongodb = { - loadBalancer.servers = [{ address = "nfss.yanlincs.com:27017"; }]; - }; - }; - }; } diff --git a/hosts/nixos/vps/system.nix b/hosts/nixos/vps/system.nix index 5c605fc..5f64086 100644 --- a/hosts/nixos/vps/system.nix +++ b/hosts/nixos/vps/system.nix @@ -41,8 +41,7 @@ useDHCP = true; # VPS typically use DHCP firewall = { enable = true; - allowedTCPPorts = [ 22 80 443 22000 27017 ]; - allowedUDPPorts = [ 22000 ]; + allowedTCPPorts = [ 22 80 443 ]; trustedInterfaces = [ "tailscale0" ]; }; }; diff --git a/modules/traefik.nix b/modules/traefik.nix index 13270d6..b72c15b 100644 --- a/modules/traefik.nix +++ b/modules/traefik.nix @@ -32,9 +32,6 @@ address = ":443"; transport.respondingTimeouts.readTimeout = "0s"; }; - mongodb = { - address = ":27017"; - }; }; # Certificate resolver using Cloudflare DNS challenge