159 lines
5.4 KiB
Nix
159 lines
5.4 KiB
Nix
{ config, pkgs, lib, ... }:
|
||
{
|
||
# Bootloader
|
||
boot.loader.grub.enable = true;
|
||
boot.loader.grub.device = "/dev/sda";
|
||
boot.loader.grub.useOSProber = true;
|
||
imports = [
|
||
./hardware-configuration.nix
|
||
../../hardware/gpu/intel.nix
|
||
../../profiles/auto-upgrade.nix
|
||
../../profiles/sshd.nix
|
||
../../profiles/podman.nix
|
||
|
||
../../users # home-manager
|
||
../../users/pbsds
|
||
../../users/jornane
|
||
|
||
../../profiles/mounts/reidun-nfs.nix
|
||
|
||
../../profiles/shell/base.nix
|
||
../../profiles/shell/archives.nix
|
||
../../profiles/shell/nix-utils.nix
|
||
../../profiles/shell/binfmt-emu.nix
|
||
|
||
../../profiles/services/tmate-server.nix # opens port 42244
|
||
|
||
../../profiles/web # enables nginx+acme, defines mkDomain
|
||
../../profiles/web/index
|
||
../../profiles/web/services/cinny.nix
|
||
../../profiles/web/services/element.nix
|
||
../../profiles/web/services/flexget.nix
|
||
../../profiles/web/services/gitea.nix
|
||
#../../profiles/web/services/hydra.nix
|
||
../../profiles/web/services/invidious.nix
|
||
../../profiles/web/services/jellyfin.nix
|
||
../../profiles/web/services/libreddit.nix
|
||
#../../profiles/web/services/mattermost.nix
|
||
#../../profiles/web/services/navidrome.nix
|
||
../../profiles/web/services/netdata.nix
|
||
../../profiles/web/services/nitter.nix
|
||
#../../profiles/web/services/ntopng.nix
|
||
../../profiles/web/services/microbin.nix
|
||
#../../profiles/web/services/owncast.nix
|
||
#../../profiles/web/services/paperless.nix
|
||
../../profiles/web/services/polaris.nix
|
||
#../../profiles/web/services/resilio.nix
|
||
../../profiles/web/services/roundcube.nix
|
||
../../profiles/web/services/thelounge.nix
|
||
../../profiles/web/services/vaultwarden.nix
|
||
../../profiles/web/services/webdav-zotero.nix
|
||
#../../profiles/web/services/convos.nix
|
||
#../../profiles/web/services/cryptpad.nix
|
||
#../../profiles/web/services/galene.nix
|
||
#../../profiles/web/services/graphana.nix
|
||
#../../profiles/web/services/hedgedoc.nix
|
||
#../../profiles/web/services/home-assistant.nix
|
||
#../../profiles/web/services/jitsi-meet.nix
|
||
#../../profiles/web/services/kukkee
|
||
#../../profiles/web/services/matrix-synapse.nix
|
||
#../../profiles/web/services/shlink.nix
|
||
#../../profiles/web/services/sourcegraph.nix
|
||
#../../profiles/web/services/censordodge.nix
|
||
#../../profiles/web/services/openspeedtest.nix
|
||
|
||
../../profiles/web/docs
|
||
../../profiles/web/docs/pdoc.nix
|
||
../../profiles/web/docs/python-docs.nix
|
||
../../profiles/web/docs/nixpkgs.nix
|
||
../../profiles/web/docs/home-manager.nix
|
||
../../profiles/web/docs/linux-docs.nix
|
||
../../profiles/web/docs/programs.nix
|
||
../../profiles/web/docs/yagcd.nix
|
||
|
||
../../profiles/web/sites/linktree-pbsds.nix
|
||
../../profiles/web/sites/refleksjon-no.nix
|
||
../../profiles/web/sites/roroslyd-no.nix
|
||
|
||
#../../profiles/web/services/trivial-gradios
|
||
|
||
#../../profiles/code-remote # TODO: move into web? services?
|
||
../../profiles/domeneshop-dyndns
|
||
../../profiles/remote-builders
|
||
../../profiles/autossh-reverse-tunnels
|
||
#../../profiles/xrdp
|
||
];
|
||
services.domeneshop-updater.targets = [
|
||
"pbsds.net"
|
||
"olavtr.pbsds.net"
|
||
"kuklef.se"
|
||
];
|
||
|
||
# TODO: remove? Move to where relevant?
|
||
nixpkgs.overlays = [
|
||
/** /
|
||
(final: prev: {
|
||
mapcrafter = prev.callPackage /home/pbsds/repos/nixpkgs-mapcrafter/pkgs/tools/games/minecraft/mapcrafter/default.nix { };
|
||
mapcrafter-world112 = prev.callPackage /home/pbsds/repos/nixpkgs-mapcrafter/pkgs/tools/games/minecraft/mapcrafter/default.nix { world="world112"; };
|
||
})
|
||
/**/
|
||
];
|
||
|
||
services.thermald.enable = true;
|
||
|
||
# Networking
|
||
networking.networkmanager.enable = true;
|
||
#networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||
#networking.iwd.enable = true
|
||
networking.interfaces.eno1.ipv4.addresses = [
|
||
{ address = "192.168.1.9"; prefixLength = 24; }
|
||
];
|
||
networking.nameservers = [
|
||
"192.168.1.254"
|
||
"8.8.8.8"
|
||
"1.1.1.1"
|
||
];
|
||
networking.defaultGateway = {
|
||
address = "192.168.1.254";
|
||
interface = "eno1";
|
||
};
|
||
#networking.useDHCP = true;
|
||
#TODO: avahi? resolved? https://git.pvv.ntnu.no/Drift/pvv-nixos-config/src/main/base.nix#L15-L18
|
||
|
||
# Installed system packages
|
||
environment.systemPackages = with pkgs; [
|
||
cage
|
||
weston
|
||
];
|
||
|
||
# TODO: remove? Move?
|
||
programs.dconf.enable = true;
|
||
|
||
# Some programs need SUID wrappers, can be configured further or are
|
||
# started in user sessions.
|
||
#programs.mtr.enable = true;
|
||
#programs.gnupg.agent = {
|
||
# enable = true;
|
||
# enableSSHSupport = true;
|
||
#};
|
||
|
||
# System fonts
|
||
# Nice to have when X-forwading on headless machines
|
||
fonts.fontDir.enable = true; # creates /run/current-system/sw/share/X11/fonts
|
||
fonts.enableDefaultFonts = true; # dejavu, freefont, gyre, liberation, unifont, noto-fonts-emoji
|
||
fonts.fonts = with pkgs; [
|
||
noto-fonts # includes Cousine
|
||
noto-fonts-cjk
|
||
noto-fonts-emoji
|
||
noto-fonts-extra
|
||
];
|
||
|
||
# This value determines the NixOS release from which the default
|
||
# settings for stateful data, like file locations and database versions
|
||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||
# this value at the release version of the first install of this system.
|
||
# Before changing this value read the documentation for this option
|
||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||
system.stateVersion = "22.11"; # Did you read the comment?
|
||
}
|