updated, revised some modules, cleaned up secrets management

1 files changed, 13 insertions, 6 deletions

diff --git a/os/srv/monero.nix b/os/srv/monero.nix
index c7db2d8..9088ef3 100644
--- a/os/srv/monero.nix
+++ b/os/srv/monero.nix
@@ -37,25 +37,32 @@ in
 
       services.monero = {
         enable = true;
-        environmentFile = config.sops.secrets."monero/rpc-password".path;
+        prune = true;
+        limits = {
+          upload = 1250;
+          download = 12500;
+          threads = 8;
+        };
         banlist = builtins.fetchurl {
           url = "https://gui.xmr.pm/files/block.txt";
           hash = "0ik4d66js6wvrvciza0li6bsajj8dvxsqlf09hcz7hg610szdxcw";
         };
-        limits = {
-          upload = 1250;
-          download = 1250;
-          threads = 4;
-        };
         rpc = {
           restricted = true;
           user = "admin";
+          password = config.sops.secrets."monero/rpc-password".path;
         };
       };
 
       services.nginx.virtualHosts."xmr.${masterDomain}" = {
         enableACME = true;
         forceSSL = true;
+        listen = [
+          {
+            addr = "10.255.0.1";
+            port = 443;
+          }
+        ];
 
         locations."/" = {
           proxyPass = "http://127.0.0.1:18081";