75 lines
3.3 KiB
Nix
75 lines
3.3 KiB
Nix
|
{ config, pkgs, ... }:
|
||
|
|
{
|
||
|
|
imports =
|
||
|
|
[ # Include the results of the hardware scan.
|
||
|
|
./hardware-configuration.nix
|
||
|
|
./taskd.nix
|
||
|
|
./nextcloud.nix
|
||
|
|
./networking.nix
|
||
|
|
# ./wireguard.nix
|
||
|
|
# ./shiori.nix
|
||
|
|
./shaarli.nix
|
||
|
|
# ./shaarli-tokudan.nix
|
||
|
|
# ./mod-wallabag.nix
|
||
|
|
# ./pkg-wallabag.nix
|
||
|
|
./navidrome.nix
|
||
|
|
./pkg-navidrome.nix
|
||
|
|
# ./wallabag.nix
|
||
|
|
./headphones.nix
|
||
|
|
./dns.nix
|
||
|
|
./backup.nix
|
||
|
|
./monitoring.nix
|
||
|
|
];
|
||
|
|
|
||
|
|
boot.loader.grub.devices = [ "/dev/sda" ];
|
||
|
|
boot.loader.grub.enable = true;
|
||
|
|
boot.loader.grub.version = 2;
|
||
|
|
boot.loader.grub.enableCryptodisk = true;
|
||
|
|
boot.loader.supportsInitrdSecrets = true;
|
||
|
|
|
||
|
|
boot.initrd.kernelModules = [ "dm-snapshot" ];
|
||
|
|
boot.initrd.availableKernelModules = ["virtio-pci"];
|
||
|
|
boot.initrd.network = {
|
||
|
|
enable = true;
|
||
|
|
ssh = {
|
||
|
|
enable = true;
|
||
|
|
port = 2222;
|
||
|
|
authorizedKeys = ["ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKN8/SH55DBiwVoSnTU8k2Pen+wmovL9QaMyehxGEsJJv/8fzwsswGalD4C/4O51LOvdu4UKkZW5hG02uVSK+58p3UV3pOPyoqsu/aDeIsWsqmTeTzUrBIWOlNzcDKnohLz2oGC5YO+wyTJ9Iteq6aGJDjErsW7sG3h5lXCs551EmJNNGhtBQaaoytMNnWqSdlVjDNCijurH7WUpp40U/RjEp532l4rX6eIIj3jBKEFbhZkFSSjqbj4xM4SyFt+Jmigb1RMjsQjmpfY1vDtM84RcYfpTUte/T5w2dkD5H6kccmWnwKSJpm9wXfx4E7lR9APdUGnau2U1+XxiD3ytGl anish@box
|
||
|
|
"];
|
||
|
|
hostKeys = [ "/host_ecdsa_key" ];
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
boot.initrd.luks.devices = {
|
||
|
|
"enc-pv" = {
|
||
|
|
name = "enc-pv";
|
||
|
|
preLVM = true;
|
||
|
|
device = "/dev/disk/by-uuid/425cc402-9221-474f-aaf1-10ac7cd4c93c";
|
||
|
|
allowDiscards = true;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
boot.initrd.secrets = {
|
||
|
|
"/host_ecdsa_key" = "/host_ecdsa_key";
|
||
|
|
};
|
||
|
|
|
||
|
|
|
||
|
|
boot.cleanTmpDir = true;
|
||
|
|
boot.kernelModules = [ "dm-snapshot" ];
|
||
|
|
|
||
|
|
users.users.anish = {
|
||
|
|
isNormalUser = true;
|
||
|
|
extraGroups = [ "wheel" ];
|
||
|
|
hashedPassword = "MO0Pbd2O4eIlA";
|
||
|
|
openssh.authorizedKeys.keys = [ "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKN8/SH55DBiwVoSnTU8k2Pen+wmovL9QaMyehxGEsJJv/8fzwsswGalD4C/4O51LOvdu4UKkZW5hG02uVSK+58p3UV3pOPyoqsu/aDeIsWsqmTeTzUrBIWOlNzcDKnohLz2oGC5YO+wyTJ9Iteq6aGJDjErsW7sG3h5lXCs551EmJNNGhtBQaaoytMNnWqSdlVjDNCijurH7WUpp40U/RjEp532l4rX6eIIj3jBKEFbhZkFSSjqbj4xM4SyFt+Jmigb1RMjsQjmpfY1vDtM84RcYfpTUte/T5w2dkD5H6kccmWnwKSJpm9wXfx4E7lR9APdUGnau2U1+XxiD3ytGl anish@box ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDM8kTdMGGmr6mv/zv+K9qVjhzqwivyyN5IV04R7/kcWKw1c6ZEzzqqmsnJ/hci6IIxZ/VEUzMhYz0iBCL0wJHHMxYoNCgISWePtDlVJdyrzm9OWjJNcRStZBW3XcY9dELJsCVcQ4LAVYE4vA+MdmbwM2FZgJhAH6qUzujpfNrj/YIVG7MTN6tbUd63uZF57F43c8WUjgRJx2o7Wl9bSe6v3PZ4fAgEO+wQPso+W+pEXLZ3hBNrHdybwdoGvG9tHlBDbLid11BxtpzmwR9CydDfpbyOXB2+tJkkNXhsHB22mN/2+vGWYhDKYPTFqbDW7McDfQChySyYDdZWmg5WHIGz anish@curve" ];
|
||
|
|
};
|
||
|
|
|
||
|
|
users.users.root.initialHashedPassword = "";
|
||
|
|
services.openssh.permitRootLogin = "prohibit-password";
|
||
|
|
networking.hostName = "bowl";
|
||
|
|
services.openssh.enable = true;
|
||
|
|
services.logind.lidSwitch = "ignore";
|
||
|
|
system.stateVersion = "20.09";
|
||
|
|
time.timeZone = "Australia/Brisbane";
|
||
|
|
}
|