forked from pub-solar/os
56 lines
1.2 KiB
Nix
56 lines
1.2 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
{
|
|
imports =
|
|
[
|
|
# Include the results of the hardware scan.
|
|
./hardware-configuration.nix
|
|
./acme.nix
|
|
./backup.nix
|
|
./drone.nix
|
|
./home-assistant.nix
|
|
./nextcloud.nix
|
|
#./whiteboard.nix
|
|
./wireguard.nix
|
|
];
|
|
|
|
# Use the GRUB 2 boot loader.
|
|
boot.loader.grub.enable = true;
|
|
boot.loader.grub.version = 2;
|
|
boot.loader.grub.device = "/dev/disk/by-id/usb-HP_iLO_Internal_SD-CARD_000002660A01-0:0";
|
|
|
|
boot.loader.systemd-boot.enable = lib.mkForce false;
|
|
|
|
time.timeZone = "Europe/Berlin";
|
|
|
|
networking = {
|
|
useDHCP = false;
|
|
|
|
interfaces.eno1.ipv4.addresses = [{
|
|
address = "80.244.242.2";
|
|
prefixLength = 29;
|
|
}];
|
|
|
|
defaultGateway = "80.244.242.1";
|
|
nameservers = [ "95.129.51.51" "80.244.244.244" ];
|
|
};
|
|
|
|
nix = {
|
|
trustedUsers = [ "ci-cache-nix-store" ];
|
|
};
|
|
|
|
services.openssh.ports = [ 2222 ];
|
|
|
|
networking.nat.enable = true;
|
|
networking.nat.internalIPs = [ "10.10.42.0/24" ];
|
|
networking.nat.externalInterface = "eno1";
|
|
|
|
|
|
networking.firewall.allowedTCPPorts = [ 80 443 2222 ];
|
|
networking.firewall.allowedUDPPorts = [ 51899 ];
|
|
|
|
networking.firewall.enable = lib.mkForce true;
|
|
|
|
system.stateVersion = "21.05"; # Did you read the comment?
|
|
}
|