tree eed49c13b2704c0d91dea7d70be7da878cfa59d6
parent f68685dc7059e31dcd58135137f601cbd881c30a
author Skyler Grey <minion@clicks.codes> 1700400056 +0000
committer Skyler Grey <minion@clicks.codes> 1700434686 +0000

Separate configs into a1d2 and fix related issues

This commit was made while a1d1's drive failed. This means there's a lot of
changes that may initially seem unrelated to separating configurations and that
this change has been deployed for several days before being pushed. It's also
expected to bypass review.

Here's a full list of changes:
- All modules have been moved from modules to modules/common
- Hardware configuration is now on a per-server basis, by Clicks device ID
  - For the uninformed, everything is given an 'area' and a 'device'. As an
    example, my house is 'Area 2'. My Mac is 'Device 1' in 'Area 2'. An ID is an
    'a' followed by the area number then 'd' followed by the device number. For
    example, my Mac is 'a2d1'.
- A 'backups' user has been provisioned. This user must have full root
  permissions. On a1d2 this user has been given an ssh key which the a1d2 user
  on a1d3 ('chickadee') has been given. When a1d1 is restored, a similar key
  will be provisioned for it.
- The port of gerrit has been changed to conform to the normal minimum of 1024.
  Note that when deploying gerrit, running its init script is required. Changing
  the port will not fix this
- Due to redeployment, keycloak client secrets have changed
- Vaultwarden extra paths have been removed, due to needing to create them on
  launch and this not happening by default
- A HIBP license has been bought and related options have been enabled in
  vaultwarden
- Collabora has been setup in docker, as the built-in code server was not
  working and the standalone nix module I've been working on is not ready
- ACME now registers certificates for mailcow, and moves its certificates into
  mailcow directories after renewal. This avoids mailcow having to use its own
  ACME
- Gerrit has been allowed to send and receive email. Feel free to mail in your
  patches, and you'll also be able to receive mail notifications about changes
  you should review

Change-Id: Ie4d50fb8f16da193195beb139922a366b72b0b0a
Reviewed-on: https://git.clicks.codes/c/Clicks/NixFiles/+/1
Tested-by: Skyler Grey <minion@clicks.codes>
Reviewed-by: Samuel Shuert <coded@clicks.codes>