122 lines
2.9 KiB
Nix
122 lines
2.9 KiB
Nix
{ config, pkgs, lib, inputs, outputs, ... }: {
|
|
imports = [
|
|
inputs.home-manager.nixosModules.default
|
|
outputs.nixosModules.shell
|
|
outputs.nixosModules.server
|
|
./hardware-configuration.nix
|
|
];
|
|
|
|
# its you!
|
|
networking.hostName = "sakoserver";
|
|
|
|
# why not
|
|
networking.networkmanager.enable = true;
|
|
|
|
time.timeZone = "Asia/Dubai";
|
|
|
|
# locale
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
console = {
|
|
font = "Lat2-Terminus16";
|
|
keyMap = "us";
|
|
};
|
|
|
|
boot.loader = {
|
|
timeout = 3;
|
|
efi.canTouchEfiVariables = true;
|
|
systemd-boot = {
|
|
enable = true;
|
|
configurationLimit = 10;
|
|
};
|
|
};
|
|
|
|
users.users.sako = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" ];
|
|
};
|
|
|
|
home-manager.useUserPackages = true;
|
|
home-manager.users.sako = { pkgs, ... }: {
|
|
home.username = "sako";
|
|
home.homeDirectory = "/home/sako";
|
|
home.stateVersion = "24.11";
|
|
programs.bash.enable = true;
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
vim
|
|
neovim
|
|
wget
|
|
killall
|
|
unzip
|
|
htop
|
|
ripgrep
|
|
];
|
|
|
|
# networking.firewall.allowedTCPPorts = [];
|
|
# networking.firewall.allowedUDPPorts = [];
|
|
|
|
# To trust others, you first must trust yourself
|
|
# - Homless guy that looked like Sun Tzu
|
|
security.pki.certificateFiles =
|
|
[ ../../modules/security/certs/trust/homelab.pem ];
|
|
|
|
modules.shell.tmux.enable = true;
|
|
|
|
void = {
|
|
server = {
|
|
isServer = true;
|
|
dns.blocky.enable = true;
|
|
nginx.enable = true;
|
|
postgresql.enable = true;
|
|
redis.enable = true;
|
|
fail2ban.enable = true;
|
|
ddclient.enable = true;
|
|
services = {
|
|
sakosite.enable = true;
|
|
forgejo = {
|
|
enable = true;
|
|
# runner.enable = true;
|
|
woodpecker.enable = true;
|
|
# pages = {
|
|
# enable = true;
|
|
# settings = {
|
|
# HOST = "127.0.0.1";
|
|
# PORT = "4563";
|
|
# ACME_ACCEPT_TERMS = "TRUE";
|
|
# ENABLE_HTTP_SERVER = "TRUE";
|
|
# # Large instances shouldn't do this
|
|
# # NO_DNS_01 = "TRUE";
|
|
# DNS_PROVIDER = "porkbun";
|
|
# GITEA_ROOT = "https://git.sako.lol";
|
|
# PAGES_DOMAIN = "pages.sako.lol";
|
|
# RAW_DOMAIN = "raw.pages.sako.lol";
|
|
# };
|
|
# environmentFile = "/srv/secrets/codeberg-pages.env";
|
|
# };
|
|
};
|
|
headscale.enable = true;
|
|
redlib.enable = true;
|
|
local = {
|
|
homepage.enable = true;
|
|
nextcloud.enable = false;
|
|
};
|
|
};
|
|
fedi = { akkoma.enable = true; };
|
|
media = {
|
|
qbittorrent = {
|
|
enable = true;
|
|
torrentPort = 55907;
|
|
openFirewall = true;
|
|
group = "media";
|
|
};
|
|
jellyfin.enable = true;
|
|
};
|
|
};
|
|
};
|
|
|
|
# https://nixos.org/manual/nixos/stable/#sec-upgrading
|
|
# don't change this pls ty ily thanks
|
|
system.stateVersion = "24.11";
|
|
}
|