foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-02-07 06:19:00 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

hosts/plover: update base config

Browse Source
This commit is contained in:
Gabriel Arazas 2024-12-18 15:24:24 +08:00
parent d99ee8309a
commit 89795b2e55
No known key found for this signature in database
GPG Key ID: 62104B43D00AA360
1 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
configs/nixos/plover/default.nix
View File

@ -1,4 +1,5 @@
{ config, lib, pkgs, foodogsquaredLib, foodogsquaredUtils, foodogsquaredModulesPath, ... }: { config, lib, pkgs, foodogsquaredLib, foodogsquaredUtils
, foodogsquaredModulesPath, ... }:
{ {
imports = [ imports = [
@ -37,16 +38,18 @@
vaultwarden.enable = true; vaultwarden.enable = true;
}; };
# Overriding the kernel version for ourselves.
boot.kernelPackages = lib.mkOverride 500 pkgs.linuxKernel.packages.linux_6_11_hardened;
# We're using our own VPN configuration for this one. # We're using our own VPN configuration for this one.
suites.vpn.personal.enable = true; suites.vpn.personal.enable = true;
services.tailscale.useRoutingFeatures = "server"; services.tailscale.useRoutingFeatures = "server";
services.tailscaleAuth.enable = true;
# Post installation script to be executed manually by the provisioner. # Post installation script to be executed manually by the provisioner.
system.build.postInstallationScript = pkgs.writeShellApplication { system.build.postInstallationScript = pkgs.writeShellApplication {
name = "post-installation-script"; name = "post-installation-script";
runtimeInputs = with pkgs; [ runtimeInputs = with pkgs; [ openssh ];
openssh
];
text = '' text = ''
sopsPrivateKey="''${1:-"key.txt"}" sopsPrivateKey="''${1:-"key.txt"}"
sopsKeyfileDir="$(dirname ${lib.escapeShellArg config.sops.age.keyFile})" sopsKeyfileDir="$(dirname ${lib.escapeShellArg config.sops.age.keyFile})"
@ -55,8 +58,8 @@
}; };
state.network = rec { state.network = rec {
ipv4 = "135.181.93.101"; ipv4 = "135.181.26.192";
ipv6 = "2a01:4f9:c012:f88c::1"; ipv6 = "2a01:4f9:c010:8db4::1";
interfaces = { interfaces = {
lan = { lan = {
@ -117,9 +120,9 @@
# self-hosted DNS server. # self-hosted DNS server.
security.acme.defaults = { security.acme.defaults = {
email = "admin+acme@foodogsquared.one"; email = "admin+acme@foodogsquared.one";
server = "https://acme-staging-v02.api.letsencrypt.org/directory";
dnsProvider = "hetzner"; dnsProvider = "hetzner";
environmentFile = config.sops.secrets."lego/env".path or "/var/lib/secrets/acme.env"; environmentFile =
config.sops.secrets."lego/env".path or "/var/lib/secrets/acme.env";
enableDebugLogs = true; enableDebugLogs = true;
}; };