nix-configurations/hosts/lkk-nix-1/default.nix

86 lines
2.0 KiB
Nix
Raw Normal View History

2022-12-30 12:05:46 +00:00
{ pkgs, ... }: {
imports = [
./hardware-configuration.nix
../common/users/m3tam3re
../common/base
./services
];
boot.loader.grub.enable = true;
boot.loader.grub.version = 2;
boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
services.openssh.enable = true;
services.openssh.passwordAuthentication = false;
networking = {
hostName = "lkk-nix-1";
firewall.enable = true;
2022-12-30 12:05:46 +00:00
firewall.allowedTCPPortRanges = [{
from = 3000;
to = 3100;
}];
2023-02-11 21:12:55 +00:00
firewall.allowedTCPPorts = [ 53 80 443 5432 3306 3478 ];
firewall.allowedUDPPorts = [ 53 51820 ];
firewall.allowedUDPPortRanges = [{
2023-01-18 19:14:16 +00:00
from = 3478;
to = 3481;
}];
2022-12-30 12:05:46 +00:00
};
2023-04-12 17:30:43 +00:00
programs.fish.enable = true;
age = {
secrets = {
mj-smtp-user.file = ../../secrets/mj-smtp-user.age;
mj-smtp-pass.file = ../../secrets/mj-smtp-pass.age;
billbee-api-key = {
file = ../../secrets/billbee-api-key.age;
mode = "770";
};
2023-02-13 18:58:05 +00:00
traefik-env = {
file = ../../secrets/traefik-env.age;
mode = "770";
owner = "traefik";
};
2023-03-28 10:03:26 +00:00
minio-root-cred = {
file = ../../secrets/minio-root-cred.age;
mode = "770";
};
2023-02-07 08:29:30 +00:00
searx-environmentFile = {
file = ../../secrets/searx-environmentFile.age;
mode = "770";
owner = "searx";
};
2023-03-28 10:03:26 +00:00
2023-02-08 13:59:00 +00:00
wg-easy-environmentFile = {
file = ../../secrets/wg-easy-environmentFile.age;
mode = "770";
};
2023-02-12 15:03:03 +00:00
briefkasten-env = {
file = ../../secrets/briefkasten-env.age;
mode = "770";
};
2023-02-13 17:46:38 +00:00
littlelink-lanakk-env = {
file = ../../secrets/littlelink-lanakk-env.age;
mode = "770";
};
2023-02-21 13:52:38 +00:00
littlelink-m3tam3re-env = {
file = ../../secrets/littlelink-m3tam3re-env.age;
mode = "770";
};
};
identityPaths = [ "/home/m3tam3re/.ssh/lkk-nix-1" ];
};
2022-12-30 12:05:46 +00:00
nix = {
gc = {
automatic = true;
options = "--delete-older-than 30d";
};
optimise.automatic = true;
};
system.stateVersion = "22.11"; # Did you read the comment?
}