Emelie Graven
90eb0c3708
The entire file structure has been reorganised into stable and unstable to separate deployments running on either channel. A `mail` host running Simple Nix Mailserver has also been added for testing to see if it's a good alternative to soverin as well as SMTP for other services.
59 lines
1.4 KiB
Nix
59 lines
1.4 KiB
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
../../common/services/ssh.nix
|
|
#./services/restic.nix
|
|
./services/mail.nix
|
|
./services/acme.nix
|
|
./data/secrets/secrets.nix
|
|
];
|
|
|
|
boot.loader.grub.enable = true;
|
|
boot.loader.grub.version = 2;
|
|
boot.loader.grub.device = "/dev/sda";
|
|
boot.supportedFilesystems = ["zfs"];
|
|
services.zfs.autoSnapshot.enable = true;
|
|
services.zfs.autoScrub.enable = true;
|
|
|
|
networking.hostName = "mail";
|
|
networking.hostId = "1e04e84b";
|
|
time.timeZone = "Europe/Copenhagen";
|
|
networking.useDHCP = false;
|
|
networking.interfaces.ens3.useDHCP = true;
|
|
networking.interfaces.ens3.ipv6.addresses = [ { address = "2a01:4f9:c010:624a::1"; prefixLength = 64; } ];
|
|
networking.defaultGateway6 = { address = "fe80::1"; interface = "ens3"; };
|
|
|
|
users.users.emelie = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" ];
|
|
openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICO4LyBsW1YuUA6i3EL/IZhchSvk7reO4qgRmR/tdQPU emelie@flap"
|
|
];
|
|
};
|
|
|
|
security.sudo.wheelNeedsPassword = false;
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
vim
|
|
htop
|
|
iotop
|
|
dig
|
|
];
|
|
|
|
nix = {
|
|
autoOptimiseStore = true;
|
|
trustedUsers = [
|
|
"root"
|
|
"@wheel"
|
|
];
|
|
};
|
|
|
|
|
|
# Use hetzner firewall instead
|
|
networking.firewall.enable = false;
|
|
system.stateVersion = "21.05";
|
|
|
|
}
|