149 lines
3.4 KiB
Nix
149 lines
3.4 KiB
Nix
{ modulesPath, config, pkgs, ... }:
|
|
let
|
|
hostname = "cloud";
|
|
admin = "toph";
|
|
password = "[REDACTED]";
|
|
timeZone = "America/New_York";
|
|
defaultLocale = "en_US.UTF-8";
|
|
in {
|
|
imports =
|
|
[
|
|
# Include the default lxc/lxd configuration.
|
|
"${modulesPath}/virtualisation/lxc-container.nix"
|
|
|
|
# Nginx
|
|
./imports/nginx.nix
|
|
# Nextcloud
|
|
./imports/nextcloud.nix
|
|
# Snapraid-runner
|
|
./imports/snapraid.nix
|
|
# Import hardware configuration.
|
|
./hardware-configuration.nix
|
|
];
|
|
|
|
# OVERLAYS for custom packages.
|
|
nixpkgs.overlays = [ (import ./overlays) ];
|
|
|
|
# NETWORKING
|
|
networking = {
|
|
firewall = {
|
|
allowedTCPPorts = [ 80 443 ];
|
|
};
|
|
dhcpcd.enable = false;
|
|
hostName = hostname;
|
|
networkmanager.enable = true;
|
|
useDHCP = false;
|
|
useHostResolvConf = false;
|
|
};
|
|
|
|
systemd.network = {
|
|
enable = true;
|
|
networks."50-eth0" = {
|
|
matchConfig.Name = "eth0";
|
|
networkConfig = {
|
|
DHCP = "ipv4";
|
|
IPv6AcceptRA = true;
|
|
};
|
|
linkConfig.RequiredForOnline = "routable";
|
|
};
|
|
};
|
|
|
|
# LOCALE
|
|
time.timeZone = timeZone;
|
|
i18n.defaultLocale = defaultLocale;
|
|
|
|
# USERS
|
|
users = {
|
|
mutableUsers = false;
|
|
users ={
|
|
"${admin}" = {
|
|
isNormalUser = true;
|
|
createHome = true;
|
|
homeMode = "750";
|
|
home = "/home/${admin}";
|
|
password = password;
|
|
extraGroups = [ "wheel" ];
|
|
shell = pkgs.fish;
|
|
openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIClZstYoT64zHnGfE7LMYNiQPN5/gmCt382lC+Ji8lrH PVE"
|
|
];
|
|
};
|
|
|
|
nextcloud.extraGroups = [ "users" "root" "wheel" ];
|
|
nextcloud.homeMode = "750";
|
|
};
|
|
};
|
|
|
|
# Enable passwordless sudo.
|
|
security.sudo.extraRules= [
|
|
{ users = [ admin ];
|
|
commands = [
|
|
{ command = "ALL" ;
|
|
options= [ "NOPASSWD" ];
|
|
}
|
|
];
|
|
}
|
|
];
|
|
|
|
# SYSTEM PACKAGES
|
|
environment.systemPackages = with pkgs; [
|
|
git
|
|
mergerfs
|
|
micro
|
|
openssh
|
|
ranger
|
|
sshfs
|
|
snapraid
|
|
snapraid-runner
|
|
wget
|
|
];
|
|
|
|
# PROGRAMS & SERVICES
|
|
programs.ssh.startAgent = true;
|
|
|
|
# Shells
|
|
environment.shells = with pkgs; [ bash fish ];
|
|
programs.fish.enable = true;
|
|
|
|
# OpenSSH service configuration.
|
|
services.openssh = {
|
|
enable = true;
|
|
settings = {
|
|
AllowUsers = null; # everyone
|
|
PasswordAuthentication = false;
|
|
KbdInteractiveAuthentication = false;
|
|
PermitRootLogin = "no";
|
|
};
|
|
};
|
|
|
|
# Enable sound.
|
|
# hardware.pulseaudio.enable = true;
|
|
# OR
|
|
# services.pipewire = {
|
|
# enable = true;
|
|
# pulse.enable = true;
|
|
# };
|
|
|
|
# Enable touchpad support (enabled default in most desktopManager).
|
|
# services.libinput.enable = true;
|
|
|
|
# LXC specific configuration
|
|
# Supress systemd units that don't work because of LXC.
|
|
# https://blog.xirion.net/posts/nixos-proxmox-lxc/#configurationnix-tweak
|
|
systemd.suppressedSystemUnits = [
|
|
"dev-mqueue.mount"
|
|
"sys-kernel-debug.mount"
|
|
"sys-fs-fuse-connections.mount"
|
|
];
|
|
|
|
# Copy the NixOS configuration file and link it from the resulting system
|
|
# (/run/current-system/configuration.nix). This is useful in case you
|
|
# accidentally delete configuration.nix.
|
|
# system.copySystemConfiguration = true;
|
|
|
|
# This value determines the NixOS release with which your system is to be
|
|
system.stateVersion = "24.11";
|
|
|
|
# Enable Flakes
|
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
|
}
|