45 lines
954 B
Nix
45 lines
954 B
Nix
# vim: tabstop=2 shiftwidth=2 expandtab
|
|
let
|
|
base-domain = "005540.xyz";
|
|
in
|
|
{ lib, ... }: {
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
./audit.nix
|
|
|
|
./openssh.nix
|
|
./tailscale.nix
|
|
|
|
./firewall.nix
|
|
./fail2ban.nix
|
|
|
|
./borgbackup.nix
|
|
|
|
# disabled since scanner only supports non-encrypted stuff
|
|
#./ftp.nix
|
|
#./samba.nix
|
|
|
|
(import ./acme.nix { inherit base-domain; })
|
|
(import ./nginx.nix { inherit base-domain; })
|
|
./postgresql.nix
|
|
|
|
(import ./sourcehut.nix { inherit base-domain; })
|
|
|
|
(import ./paperless.nix { inherit base-domain lib; })
|
|
|
|
./userprogs.nix
|
|
];
|
|
|
|
environment.sessionVariables = {
|
|
TERM = "xterm-256color";
|
|
};
|
|
|
|
boot.tmp.cleanOnBoot = true;
|
|
zramSwap.enable = true;
|
|
networking.hostName = "quasar";
|
|
users.users.root.initialPassword = "asunarovow";
|
|
networking.domain = "";
|
|
nix.allowedUsers = [ "@wheel" "root" ];
|
|
console.keyMap = "us";
|
|
system.stateVersion = "23.11";
|
|
}
|