2023-02-25 13:45:21 +00:00
|
|
|
{
|
|
|
|
|
config,
|
|
|
|
|
lib,
|
|
|
|
|
pkgs,
|
|
|
|
|
...
|
|
|
|
|
}: {
|
|
|
|
|
imports = [
|
|
|
|
|
# Include the results of the hardware scan.
|
|
|
|
|
./hardware-configuration.nix
|
|
|
|
|
./acme.nix
|
|
|
|
|
./backup.nix
|
|
|
|
|
./drone.nix
|
|
|
|
|
./home-assistant.nix
|
|
|
|
|
./nextcloud.nix
|
|
|
|
|
./wireguard.nix
|
|
|
|
|
./builder.nix
|
|
|
|
|
./invidious.nix
|
|
|
|
|
./factorio.nix
|
|
|
|
|
|
|
|
|
|
./invoiceplane.nix
|
|
|
|
|
#./tang.nix
|
|
|
|
|
#./whiteboard.nix
|
2023-03-07 15:48:46 +00:00
|
|
|
|
|
|
|
|
./libvirt-container.nix
|
|
|
|
|
./monitoring.nix
|
2023-02-25 13:45:21 +00:00
|
|
|
];
|
|
|
|
|
|
|
|
|
|
boot.loader.systemd-boot.enable = lib.mkForce false;
|
|
|
|
|
|
|
|
|
|
time.timeZone = "Europe/Berlin";
|
|
|
|
|
|
|
|
|
|
services.openssh.ports = [2222];
|
|
|
|
|
|
|
|
|
|
networking.nat.enable = true;
|
2023-04-01 14:48:43 +00:00
|
|
|
networking.nat.internalIPs = ["10.10.42.0/24" "10.0.1.1"];
|
|
|
|
|
networking.nat.externalInterface = "br0";
|
2023-02-25 13:45:21 +00:00
|
|
|
|
2023-03-07 15:48:46 +00:00
|
|
|
networking.firewall.enable = lib.mkForce true;
|
2023-02-25 13:45:21 +00:00
|
|
|
networking.firewall.allowedTCPPorts = [80 443 2222];
|
|
|
|
|
networking.firewall.allowedUDPPorts = [51899];
|
|
|
|
|
|
|
|
|
|
system.stateVersion = "21.05"; # Did you read the comment?
|
|
|
|
|
}
|
