Compare commits
2 commits
7a0bbc1548
...
92a980dab2
Author | SHA1 | Date | |
---|---|---|---|
92a980dab2 | |||
51a6f74c5f |
1 changed files with 27 additions and 60 deletions
|
@ -1,9 +1,10 @@
|
|||
{
|
||||
config,
|
||||
pkgs,
|
||||
lib,
|
||||
...
|
||||
}: {
|
||||
}: let
|
||||
vars = import ../../vars.nix;
|
||||
in {
|
||||
# NixOS wants to enable GRUB by default
|
||||
boot.loader.grub.enable = false;
|
||||
# Enables the generation of /boot/extlinux/extlinux.conf
|
||||
|
@ -55,11 +56,6 @@
|
|||
neovim
|
||||
curl
|
||||
wget
|
||||
bind
|
||||
iptables
|
||||
python3
|
||||
nodejs
|
||||
docker-compose
|
||||
];
|
||||
|
||||
services.openssh = {
|
||||
|
@ -67,45 +63,23 @@
|
|||
settings.PermitRootLogin = "yes";
|
||||
};
|
||||
|
||||
# Some sample service.
|
||||
# Use dnsmasq as internal LAN DNS resolver.
|
||||
services.dnsmasq = {
|
||||
enable = false;
|
||||
settings.servers = ["8.8.8.8" "8.8.4.4" "1.1.1.1"];
|
||||
settings.extraConfig = ''
|
||||
address=/fenrir.test/192.168.100.6
|
||||
address=/recalune.test/192.168.100.7
|
||||
address=/eth.nixpi.test/192.168.100.3
|
||||
address=/wlan.nixpi.test/192.168.100.4
|
||||
'';
|
||||
services.restic.server = {
|
||||
enable = true;
|
||||
dataDir = "/mnt/backups";
|
||||
extraFlags = ["--no-auth"];
|
||||
};
|
||||
|
||||
services.tailscale = {
|
||||
enable = true;
|
||||
useRoutingFeatures = "server";
|
||||
};
|
||||
|
||||
virtualisation.docker.enable = true;
|
||||
|
||||
networking.firewall.enable = false;
|
||||
|
||||
# WiFi
|
||||
hardware = {
|
||||
enableRedistributableFirmware = true;
|
||||
firmware = [pkgs.wireless-regdb];
|
||||
};
|
||||
# Networking
|
||||
networking = {
|
||||
# useDHCP = true;
|
||||
interfaces.wlan0 = {
|
||||
useDHCP = false;
|
||||
ipv4.addresses = [
|
||||
{
|
||||
# I used static IP over WLAN because I want to use it as local DNS resolver
|
||||
address = "192.168.1.4";
|
||||
prefixLength = 24;
|
||||
}
|
||||
];
|
||||
};
|
||||
interfaces.eth0 = {
|
||||
useDHCP = true;
|
||||
};
|
||||
};
|
||||
networking.useDHCP = true;
|
||||
|
||||
# forwarding
|
||||
boot.kernel.sysctl = {
|
||||
|
@ -116,27 +90,20 @@
|
|||
|
||||
# put your own configuration here, for example ssh keys:
|
||||
users.mutableUsers = true;
|
||||
users.groups = {
|
||||
nixos = {
|
||||
gid = 1000;
|
||||
name = "nixos";
|
||||
};
|
||||
};
|
||||
users.users = {
|
||||
nixos = {
|
||||
uid = 1000;
|
||||
home = "/home/nixos";
|
||||
name = "nixos";
|
||||
group = "nixos";
|
||||
users.users.${vars.user} = {
|
||||
isNormalUser = true;
|
||||
password = "changeme";
|
||||
extraGroups = ["wheel" "docker"];
|
||||
};
|
||||
};
|
||||
users.users.root.openssh.authorizedKeys.keys = [
|
||||
#Desktop
|
||||
openssh.authorizedKeys.keys = [
|
||||
#Adalbert
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJd6Gut34abkwlZ4tZVBO4Qt7CkIpPm/Z8R6JCisjnYy openpgp:0xBD0CFCA0"
|
||||
|
||||
#Convertible
|
||||
#Ludwig
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFlRsnLqm6Ap3yKEEhtFiWavo72df/X5Il1ZCmENUqev openpgp:0xDE189CA5"
|
||||
|
||||
#Franz
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIINCjLoirHMos7c9lRatWtSYAk68xbUGc8vPU0wFxIzj openpgp:0x7430326E"
|
||||
];
|
||||
};
|
||||
system.stateVersion = "23.11";
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue