started refactoring

hosts/sisyphe/configuration.nix

@@ -9,8 +9,8 @@
   imports = [
     ./hardware-configuration.nix
     ./server-configuration.nix
-    ../../features/server/default.nix
-    ../../features/shared/ssh.nix
+    ./features/server/default.nix
+    ./features/shared/ssh.nix
   ];
 
   # Use the GRUB 2 boot loader.

hosts/sisyphe/features/backups.nix

@@ -79,7 +79,6 @@
         ];
         postgresql_databases = [
           { name = "nextcloud"; }
-          { name = "matrix-synapse"; }
         ];
         exclude_patterns = [ "/home/*/.cache" ];
         encryption_passcommand = "${pkgs.coreutils}/bin/cat /run/secrets/borgRemoteServerPassword";

hosts/sisyphe/features/samba-shares.nix

@@ -1,6 +1,4 @@
 { config, lib, ... }:
-with lib;
-# TODO: add access to series and TV folders.
 let
   cfg = config.samba;
 in
@@ -31,20 +29,20 @@ in
           browseable = "yes";
           "read only" = "no";
           "create mask" = "0644";
-          "directory mask" = "0755";
+          "directory mask" = "0655";
         };
         ebooks = {
           path = "${cfg.dir}/Ebooks";
           browseable = "yes";
           "read only" = "no";
           "create mask" = "0644";
-          "directory mask" = "0755";
+          "directory mask" = "0655";
         };
         movies = {
           path = "${cfg.dir}/Films";
           browseable = "yes";
           "create mask" = "0644";
-          "directory mask" = "0755";
+          "directory mask" = "0655";
           "read only" = "no";
         };
         shows = {
@@ -54,6 +52,12 @@ in
           "directory mask" = "0755";
           browseable = "yes";
         };
+        torrents = {
+          path = "${cfg.dir}/Torrents";
+          "read only" = "yes";
+          "create mask" = "644";
+          browseable = "yes";
+        };
       };
     };
   };

hosts/sisyphe/server-configuration.nix

@@ -38,8 +38,7 @@ in
       allowedTCPPorts = [
         22 # ssh
         80 # http
-        8008 # matrix-synapse
-        8448 # matrix-synapse
+        443 # ssh
       ];
       allowedUDPPorts = [ ];
     };