quasar/configuration.nix

# vim: tabstop=2 shiftwidth=2 expandtab
let
  base-domain = "005540.xyz";
in
{ lib, ... }: {
  imports = [
    ./hardware-configuration.nix
    ./audit.nix

    ./openssh.nix
    ./tailscale.nix

    ./firewall.nix
    ./fail2ban.nix

    ./borgbackup.nix

    # disabled since scanner only supports non-encrypted stuff
    #./ftp.nix
    #./samba.nix

    (import ./acme.nix { inherit base-domain; })
    (import ./nginx.nix { inherit base-domain; })
    ./postgresql.nix

    (import ./sourcehut.nix { inherit base-domain; })

    (import ./paperless.nix { inherit base-domain lib; })

    ./userprogs.nix
  ];

  environment.sessionVariables = {
    TERM = "xterm-256color";
  };

  boot.tmp.cleanOnBoot = true;
  zramSwap.enable = true;
  networking.hostName = "quasar";
  networking.domain = "";
  nix.allowedUsers = [ "@wheel" "root" ];
  system.stateVersion = "23.11";
}