mirror of
https://git.gay/xqtc/nixos-config
synced 2024-11-22 21:40:31 +01:00
137 lines
3.7 KiB
Nix
137 lines
3.7 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
with lib; {
|
|
imports = [
|
|
# Include the results of the hardware scan.
|
|
./hardware-configuration.nix
|
|
./monitoring.nix
|
|
./jellyfin.nix
|
|
./calibre-web.nix
|
|
./transmission.nix
|
|
./lanrarari.nix
|
|
./uptime.nix
|
|
./git.nix
|
|
./docker.nix
|
|
../../gc.nix
|
|
../../../common
|
|
];
|
|
|
|
services.caddy = {
|
|
enable = true;
|
|
email = "xqtc@tutanota.com";
|
|
configFile = pkgs.writeText "Caddyfile" ''
|
|
heroin.trade {
|
|
root * /var/www/website/public/
|
|
handle_errors {
|
|
rewrite * /404.html
|
|
file_server
|
|
}
|
|
file_server
|
|
}
|
|
syncthing.heroin.trade {
|
|
reverse_proxy http://localhost:8384 {
|
|
header_up Some-Header "localhost"
|
|
}
|
|
}
|
|
demos.heroin.trade {
|
|
root * /var/www/demos/
|
|
file_server browse
|
|
}
|
|
git.heroin.trade {
|
|
reverse_proxy http://localhost:3002
|
|
}
|
|
|
|
jellyfin.heroin.trade {
|
|
reverse_proxy http://127.0.0.1:8096
|
|
}
|
|
|
|
calibre.heroin.trade {
|
|
reverse_proxy http://localhost:3000
|
|
}
|
|
|
|
grafana.heroin.trade {
|
|
reverse_proxy http://127.0.0.1:2342
|
|
}
|
|
|
|
uptime.heroin.trade {
|
|
reverse_proxy 127.0.0.1:3001
|
|
}
|
|
'';
|
|
};
|
|
|
|
services.syncthing.settings.gui.insecureSkipHostcheck = true;
|
|
|
|
nix.settings.experimental-features = ["nix-command" "flakes"];
|
|
|
|
nix.settings = {
|
|
trusted-users = ["xqtc"];
|
|
substituters = [
|
|
"https://nix-community.cachix.org"
|
|
];
|
|
trusted-public-keys = [
|
|
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
|
|
];
|
|
};
|
|
# Use the systemd-boot EFI boot loader.
|
|
boot.loader.systemd-boot.enable = true;
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
|
|
networking.hostName = "beleth"; # Define your hostname.
|
|
networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.
|
|
|
|
# Set your time zone.
|
|
time.timeZone = "Europe/Berlin";
|
|
|
|
users.users.xqtc = {
|
|
isNormalUser = true;
|
|
extraGroups = ["wheel"];
|
|
packages = with pkgs; [
|
|
tree
|
|
];
|
|
openssh.authorizedKeys.keys = [
|
|
# TODO: Add remaining keys from https://meta.sr.ht/~xqrc.keys
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJTLJqIVwnqFO64rnc66d234TFOdFXpDS9fJUA4/f4in xqtc@alastor"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN7UkcmSVo+SeB5Obevz3mf3UHruYxn0UHUzoOs2gDBy xqtc@asmodeus"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPf3w5bHAssHthg9SPXVpG4w9v8m16X/0J3bjg08P6EA xqtc@seraphim"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJYa+LoHGGvu12iBufUcr3GD8tsq4LuJdwLjaDkTr0SL xqtc@lilith"
|
|
];
|
|
};
|
|
users.users.root.openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN7UkcmSVo+SeB5Obevz3mf3UHruYxn0UHUzoOs2gDBy xqtc@asmodeus"
|
|
];
|
|
|
|
programs.bash.blesh.enable = true;
|
|
# programs.bash.shellInit = "cd /home/xqtc/nixos-config/; export GIT_REVISION_CONFIG=$(nix flake metadata --json | jq -r '.locked.rev'); echo $GIT_REVISION_CONFIG; cd;";
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
neovim
|
|
vim
|
|
git
|
|
wget
|
|
jq
|
|
zola
|
|
];
|
|
|
|
programs.mtr.enable = true;
|
|
programs.gnupg.agent = {
|
|
enable = true;
|
|
enableSSHSupport = true;
|
|
};
|
|
|
|
# Enable the OpenSSH daemon.
|
|
services.openssh.enable = true;
|
|
|
|
services.resolved.enable = true;
|
|
services.mullvad-vpn.enable = true;
|
|
|
|
# Open ports in the firewall.
|
|
networking.firewall.allowedTCPPorts = [22 80 443];
|
|
# networking.firewall.allowedUDPPorts = [443];
|
|
|
|
system.stateVersion = "24.05"; # Did you read the comment?
|
|
}
|