dadada/nix-config
dadada/nix-config
1
0
Fork 0
Code Issues 2 Pull requests 5 Projects Releases Packages Wiki Activity Actions

Reformat using nixpkgs-fmt

Browse source
This commit is contained in:
Tim Schubert 2021-01-02 14:23:50 +01:00
parent 368ed0797d
commit 5a734099bf
Signed by: dadada
GPG key ID: EEB8D1CE62C4DFEA
36 changed files with 209 additions and 168 deletions
Download patch file Download diff file Expand all files Collapse all files

42
hosts/ifrit/default.nix
View file

@ -7,7 +7,8 @@ let
"media.local"
];
backups = "/mnt/storage/backup";
in {
in
{
imports = [
../../modules/profiles/base
];
@ -107,13 +108,22 @@ in {
allowPing = true;
allowedTCPPorts = [
22 # SSH
80 443 # HTTP(S)
111 2049 # NFS
137 138 139 445 # SMB
80
443 # HTTP(S)
111
2049 # NFS
137
138
139
445 # SMB
];
allowedUDPPorts = [
137 138 139 445 # SMB
111 2049 # NFS
137
138
139
445 # SMB
111
2049 # NFS
51234 # Wireguard
];
};
@ -121,16 +131,16 @@ in {
security.acme = {
email = "d553a78d-0349-48db-9c20-5b27af3a1dfc@dadada.li";
acceptTerms = true;
# certs."webchat.dadada.li" = {
# credentialsFile = "/var/lib/lego/acme-joker.env";
# dnsProvider = "joker";
# postRun = "systemctl reload nginx.service";
# };
# certs."weechat.dadada.li" = {
# credentialsFile = "/var/lib/lego/acme-joker.env";
# dnsProvider = "joker";
# postRun = "systemctl reload nginx.service";
# };
# certs."webchat.dadada.li" = {
# credentialsFile = "/var/lib/lego/acme-joker.env";
# dnsProvider = "joker";
# postRun = "systemctl reload nginx.service";
# };
# certs."weechat.dadada.li" = {
# credentialsFile = "/var/lib/lego/acme-joker.env";
# dnsProvider = "joker";
# postRun = "systemctl reload nginx.service";
# };
};
users.users."mist" = {

10
hosts/surgat/default.nix
View file

@ -2,7 +2,8 @@
let
hostName = "surgat";
this = import ../.. { inherit pkgs; };
in {
in
{
imports = [ this.profiles.base ];
networking.hostName = hostName;
@ -43,7 +44,8 @@ in {
allowPing = true;
allowedTCPPorts = [
22 # SSH
80 443 # HTTPS
80
443 # HTTPS
];
allowedUDPPorts = [
51234 # Wireguard
@ -60,10 +62,10 @@ in {
boot.loader.grub.version = 2;
boot.loader.grub.device = "/dev/sda";
networking.interfaces."ens3".ipv6.addresses = [ {
networking.interfaces."ens3".ipv6.addresses = [{
address = "2a01:4f8:c17:1d70::";
prefixLength = 64;
} ];
}];
networking.defaultGateway6 = {
address = "fe80::1";