tlaternet-server/etc/nixos/configuration.nix

69 lines
1.3 KiB
Nix
Raw Normal View History

2019-11-26 23:05:21 +00:00
{ config, pkgs, ... }:
2019-11-23 23:55:26 +00:00
{
imports = [
./hardware-configuration.nix
./linode.nix
2020-02-02 08:03:54 +00:00
<nixpkgs/nixos/modules/profiles/headless.nix>
./modules/networked-docker-containers.nix
# FIXME: It'd be much nicer if these were imported further down,
# and set inside the docker-containers set, instead of setting the
# docker-containers set here.
./services/nginx.nix
./services/gitlab.nix
2019-11-23 23:55:26 +00:00
];
networking = {
hostName = "tlater.net";
# useDHCP is deprecated
useDHCP = false;
interfaces.eth0.useDHCP = true;
2019-11-26 23:06:50 +00:00
firewall = {
enable = true;
allowedTCPPorts = [
80
443
2222
3022
2019-11-26 23:06:50 +00:00
];
};
2019-11-23 23:55:26 +00:00
};
time.timeZone = "Europe/London";
users.users = {
tlater = {
isNormalUser = true;
extraGroups = [ "wheel" "docker" ];
openssh.authorizedKeys.keyFiles = [ ./keys/tlater.pub ];
2019-11-23 23:55:26 +00:00
};
lauren = {
isNormalUser = true;
openssh.authorizedKeys.keyFiles = [ ./keys/lauren.pub ];
2019-11-23 23:55:26 +00:00
};
};
services = {
openssh = {
enable = true;
allowSFTP = false;
passwordAuthentication = false;
permitRootLogin = "no";
ports = [ 2222 ];
startWhenNeeded = true;
};
};
2019-11-26 23:06:50 +00:00
virtualisation.docker = {
enable = true;
autoPrune.enable = true;
};
2019-11-23 23:55:26 +00:00
system.stateVersion = "19.09";
}