port to flakes

nixos/pruflas/configuration.nix

@@ -0,0 +1,108 @@
+{ config, pkgs, lib, ... }:
+with lib;
+let
+  hostName = "pruflas";
+in
+{
+  imports = [ ./hardware-configuration.nix ];
+
+  networking.hostName = hostName;
+  networking.hosts = {
+    "10.3.3.3" = [ "hydra.dadada.li" ];
+  };
+
+  services.logind.lidSwitch = "ignore";
+
+  services.hydra = {
+    enable = true;
+    package = pkgs.hydra-unstable;
+    hydraURL = "https://hydra.dadada.li";
+    notificationSender = "hydra@localhost";
+    buildMachinesFiles = [ ];
+    useSubstitutes = true;
+    listenHost = "hydra.dadada.li";
+    port = 3000;
+  };
+
+  nix.buildMachines = [
+    {
+      hostName = "localhost";
+      system = "x86_64-linux";
+      supportedFeatures = [ "kvm" "nixos-test" "big-parallel" "benchmark" ];
+      maxJobs = 8;
+    }
+  ];
+
+  services.nginx = {
+    recommendedTlsSettings = true;
+    recommendedOptimisation = true;
+    recommendedGzipSettings = true;
+    logError = "/dev/null";
+    appendHttpConfig = ''
+      access_log off;
+    '';
+  };
+
+  dadada.admin.enable = true;
+
+  dadada.networking.vpnExtension = "5";
+  dadada.backupClient = {
+    enable = true;
+    bs = true;
+  };
+
+  networking.useDHCP = false;
+  networking.interfaces."enp0s25".useDHCP = true;
+
+  networking.firewall = {
+    enable = true;
+    allowPing = true;
+    allowedTCPPorts = [
+      22 # SSH
+      80
+      443 # HTTPS
+      3000 # Hydra
+    ];
+    allowedUDPPorts = [
+      51234 # Wireguard
+      51235 # Wireguard
+    ];
+  };
+
+  security.acme = {
+    email = "d553a78d-0349-48db-9c20-5b27af3a1dfc@dadada.li";
+    acceptTerms = true;
+  };
+
+  boot.kernelModules = [ "kvm-intel" ];
+
+  # Use the systemd-boot EFI boot loader.
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  swapDevices = [
+    {
+      device = "/var/swapfile";
+      size = 32768;
+    }
+  ];
+
+
+  networking.wireguard.interfaces."hydra" = {
+    ips = [ "10.3.3.3/24" ];
+    listenPort = 51235;
+
+    privateKeyFile = "/var/lib/wireguard/hydra";
+
+    peers = [
+      {
+        publicKey = "KzL+PKlv4LktIqqTqC9Esw8dkSZN2qSn/vq76UHbOlY=";
+        allowedIPs = [ "10.3.3.1/32" ];
+        endpoint = "surgat.dadada.li:51235";
+        persistentKeepalive = 25;
+      }
+    ];
+  };
+
+  system.stateVersion = "20.09";
+}