Richie
e4eef6dff0
treefmt / nix fmt (pull_request) Successful in 5s
pytest / pytest (pull_request) Successful in 29s
test ebook search / test-ebook-search (pull_request) Successful in 34s
build_systems / build-brain (pull_request) Successful in 48s
build_systems / build-bob (pull_request) Successful in 48s
build_systems / build-rhapsody-in-green (pull_request) Successful in 58s
build_systems / build-jeeves (pull_request) Successful in 2m14s
- split networking into interface and firewall modules - define named service ports in one location - remove scattered service-level firewall rules
55 lines
1.2 KiB
Nix
55 lines
1.2 KiB
Nix
{ inputs, ... }:
|
|
let
|
|
vars = import ./vars.nix;
|
|
in
|
|
{
|
|
imports = [
|
|
"${inputs.self}/users/dov"
|
|
"${inputs.self}/users/math"
|
|
"${inputs.self}/users/richie"
|
|
"${inputs.self}/users/steve"
|
|
"${inputs.self}/common/global"
|
|
"${inputs.self}/common/optional/docker.nix"
|
|
"${inputs.self}/common/optional/monitoring-agent.nix"
|
|
"${inputs.self}/common/optional/ssh_decrypt.nix"
|
|
"${inputs.self}/common/optional/syncthing_base.nix"
|
|
"${inputs.self}/common/optional/tailscale.nix"
|
|
"${inputs.self}/common/optional/update.nix"
|
|
"${inputs.self}/common/optional/zfs"
|
|
./monitoring
|
|
./docker
|
|
./services
|
|
./hardware.nix
|
|
./networking
|
|
./programs.nix
|
|
./runners
|
|
./syncthing.nix
|
|
];
|
|
|
|
services = {
|
|
openssh.ports = [ 629 ];
|
|
|
|
smartd.enable = true;
|
|
|
|
snapshot_manager = {
|
|
path = ./snapshot_config.toml;
|
|
EnvironmentFile = "${vars.secrets}/services/snapshot_manager";
|
|
};
|
|
|
|
zerotierone = {
|
|
enable = true;
|
|
joinNetworks = [
|
|
"e4da7455b2ae64ca"
|
|
"a09acf02330d37b9"
|
|
];
|
|
};
|
|
};
|
|
|
|
users.groups = {
|
|
nornsight = { };
|
|
nornsight-admin = { };
|
|
};
|
|
|
|
system.stateVersion = "24.05";
|
|
}
|