61 lines
3.3 KiB
Nix
61 lines
3.3 KiB
Nix
|
{ config, pkgs, ... }:
|
|||
|
|
{
|
|||
|
|
imports =
|
|||
|
|
[ # Include the results of the hardware scan.
|
|||
|
|
./hardware-configuration.nix
|
|||
|
|
./wireguard.nix
|
|||
|
|
./matrix.nix
|
|||
|
|
./monitoring.nix
|
|||
|
|
./rss-bridge.nix
|
|||
|
|
./gitea.nix
|
|||
|
|
# ./dns.nix
|
|||
|
|
"${builtins.fetchTarball "https://github.com/ryantm/agenix/archive/main.tar.gz"}/modules/age.nix"
|
|||
|
|
];
|
|||
|
|
|
|||
|
|
# Use the GRUB 2 boot loader.
|
|||
|
|
boot.loader.grub.enable = true;
|
|||
|
|
boot.loader.grub.version = 2;
|
|||
|
|
boot.loader.grub.device = "/dev/vda"; # or "nodev" for efi only
|
|||
|
|
|
|||
|
|
networking.hostName = "helix"; # Define your hostname.
|
|||
|
|
|
|||
|
|
networking.useDHCP = false;
|
|||
|
|
networking.interfaces.ens3.useDHCP = true;
|
|||
|
|
|
|||
|
|
# Configure network proxy if necessary
|
|||
|
|
# networking.proxy.default = "http://user:password@proxy:port/";
|
|||
|
|
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
|||
|
|
|
|||
|
|
# Enable the OpenSSH daemon.
|
|||
|
|
services.openssh.enable = true;
|
|||
|
|
services.openssh.passwordAuthentication = false;
|
|||
|
|
services.openssh.permitRootLogin = "no";
|
|||
|
|
|
|||
|
|
# Open ports in the firewall.
|
|||
|
|
# networking.firewall.allowedTCPPorts = [ ... ];
|
|||
|
|
# networking.firewall.allowedUDPPorts = [ ... ];
|
|||
|
|
# Or disable the firewall altogether.
|
|||
|
|
# networking.firewall.enable = false;
|
|||
|
|
|
|||
|
|
# Include agenix
|
|||
|
|
#environment.systemPackages = [ agenix.defaultPackage.x86_64-linux ];
|
|||
|
|
|
|||
|
|
# Define a user account. Don't forget to set a password with ‘passwd’.
|
|||
|
|
users.users.anish = {
|
|||
|
|
isNormalUser = true;
|
|||
|
|
extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user
|
|||
|
|
openssh.authorizedKeys.keys = [
|
|||
|
|
"ssh-rsa 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 anish@curve"
|
|||
|
|
"ssh-rsa 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 nix-on-droid@localhost"
|
|||
|
|
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKN8/SH55DBiwVoSnTU8k2Pen+wmovL9QaMyehxGEsJJv/8fzwsswGalD4C/4O51LOvdu4UKkZW5hG02uVSK+58p3UV3pOPyoqsu/aDeIsWsqmTeTzUrBIWOlNzcDKnohLz2oGC5YO+wyTJ9Iteq6aGJDjErsW7sG3h5lXCs551EmJNNGhtBQaaoytMNnWqSdlVjDNCijurH7WUpp40U/RjEp532l4rX6eIIj3jBKEFbhZkFSSjqbj4xM4SyFt+Jmigb1RMjsQjmpfY1vDtM84RcYfpTUte/T5w2dkD5H6kccmWnwKSJpm9wXfx4E7lR9APdUGnau2U1+XxiD3ytGl anish@box" ];
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
# This value determines the NixOS release with which your system is to be
|
|||
|
|
# compatible, in order to avoid breaking some software such as database
|
|||
|
|
# servers. You should change this only after NixOS release notes say you
|
|||
|
|
# should.
|
|||
|
|
system.stateVersion = "19.09"; # Did you read the comment?
|
|||
|
|
|
|||
|
|
}
|
|||
|
|
|