diff --git a/modules/hosts/nixos/hetznix01/default.nix b/modules/hosts/nixos/hetznix01/default.nix index d138703..5f06448 100644 --- a/modules/hosts/nixos/hetznix01/default.nix +++ b/modules/hosts/nixos/hetznix01/default.nix @@ -1,7 +1,8 @@ -{ pkgs, username, ... }: { +{ inputs, pkgs, username, ... }: { imports = [ - ./hardware-configuration.nix + ../../common/linux/nixroutes.nix ./disk-config.nix + ./hardware-configuration.nix ./post-install ]; @@ -84,39 +85,10 @@ }; }; - systemd.network = { - enable = true; - networks."10-wan" = { - matchConfig.Name = "enp1s0"; - address = [ - "5.161.244.95/32" - "2a01:4ff:f0:977c::1/64" - ]; - dns = [ - "185.12.64.1" - "185.12.64.2" - "2a01:4ff:ff00::add:1" - "2a01:4ff:ff00::add:2" - ]; - routes = [ - { Destination = "172.31.1.1"; } - { Gateway = "172.31.1.1"; GatewayOnLink = true; } - { Gateway = "fe80::1"; } - ]; - # make the routes on this interface a dependency for network-online.target - linkConfig.RequiredForOnline = "routable"; - }; - }; - users.users.${username} = { isNormalUser = true; description = "Gene Liverman"; extraGroups = [ "networkmanager" "wheel" ]; linger = true; - openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFvLaPTfG3r+bcbI6DV4l69UgJjnwmZNCQk79HXyf1Pt gene@rainbow-planet" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIp42X5DZ713+bgbOO+GXROufUFdxWo7NjJbGQ285x3N gene.liverman@ltnglobal.com" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICxSBXdng/+esUXN/uLHQ0l9SgHS5EI9Z8UbqxLMNpK5 gene@newt" - ]; }; } diff --git a/modules/hosts/nixos/hetznix01/post-install/default.nix b/modules/hosts/nixos/hetznix01/post-install/default.nix index 183898b..83eddd6 100644 --- a/modules/hosts/nixos/hetznix01/post-install/default.nix +++ b/modules/hosts/nixos/hetznix01/post-install/default.nix @@ -12,24 +12,6 @@ in { ./nginx.nix ]; - mailserver = { - enable = true; - enableImap = false; - enableImapSsl = true; - enableSubmission = false; - enableSubmissionSsl = true; - fqdn = "mail.alt.${domain}"; - domains = [ - "alt.${domain}" - "indianspringsbsa.org" - "pack1828.org" - ]; - stateVersion = 3; - - # Use Let's Encrypt certificates from Nginx - certificateScheme = "acme"; - }; - services = { collabora-online = { enable = true; diff --git a/modules/hosts/nixos/hetznix02/default.nix b/modules/hosts/nixos/hetznix02/default.nix index 1915a93..6d33499 100644 --- a/modules/hosts/nixos/hetznix02/default.nix +++ b/modules/hosts/nixos/hetznix02/default.nix @@ -1,8 +1,10 @@ -{ pkgs, username, ... }: { +{ inputs, pkgs, username, ... }: { imports = [ - ./hardware-configuration.nix + ../../common/linux/nixroutes.nix ./disk-config.nix + ./hardware-configuration.nix ./post-install + inputs.private-flake.nixosModules.private.hetznix02 ]; system.stateVersion = "24.05"; @@ -51,41 +53,11 @@ ''; }; - systemd.network = { - enable = true; - networks."10-wan" = { - matchConfig.Name = "enp1s0"; - address = [ - "195.201.224.89/32" - "2a01:4f8:1c1e:aa68::1/64" - "fe80::9400:3ff:feae:45aa/64" - ]; - dns = [ - "185.12.64.1" - "185.12.64.2" - "2a01:4ff:ff00::add:1" - "2a01:4ff:ff00::add:2" - ]; - routes = [ - { Destination = "172.31.1.1"; } - { Gateway = "172.31.1.1"; GatewayOnLink = true; } - { Gateway = "fe80::1"; } - ]; - # make the routes on this interface a dependency for network-online.target - linkConfig.RequiredForOnline = "routable"; - }; - }; - users.users.${username} = { isNormalUser = true; description = "Gene Liverman"; extraGroups = [ "networkmanager" "wheel" ]; linger = true; - openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFvLaPTfG3r+bcbI6DV4l69UgJjnwmZNCQk79HXyf1Pt gene@rainbow-planet" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIp42X5DZ713+bgbOO+GXROufUFdxWo7NjJbGQ285x3N gene.liverman@ltnglobal.com" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAyYpMcbTCpDtP7wUcXnfFXvekPL/tz/k2Q3kCZwfGwZ gene@kiosk-gene-desk" - ]; }; zramSwap.enable = true; diff --git a/modules/hosts/nixos/kiosk-entryway/default.nix b/modules/hosts/nixos/kiosk-entryway/default.nix index a28e1eb..a694dbf 100644 --- a/modules/hosts/nixos/kiosk-entryway/default.nix +++ b/modules/hosts/nixos/kiosk-entryway/default.nix @@ -117,10 +117,6 @@ description = "Gene Liverman"; extraGroups = [ "networkmanager" "wheel" ]; linger = true; - openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFvLaPTfG3r+bcbI6DV4l69UgJjnwmZNCQk79HXyf1Pt gene@rainbow-planet" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIp42X5DZ713+bgbOO+GXROufUFdxWo7NjJbGQ285x3N gene.liverman@ltnglobal.com" - ]; }; zramSwap = { diff --git a/modules/hosts/nixos/kiosk-gene-desk/default.nix b/modules/hosts/nixos/kiosk-gene-desk/default.nix index 58cf555..ace2fe5 100644 --- a/modules/hosts/nixos/kiosk-gene-desk/default.nix +++ b/modules/hosts/nixos/kiosk-gene-desk/default.nix @@ -110,10 +110,6 @@ description = "Gene Liverman"; extraGroups = [ "networkmanager" "wheel" ]; linger = true; - openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFvLaPTfG3r+bcbI6DV4l69UgJjnwmZNCQk79HXyf1Pt gene@rainbow-planet" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIp42X5DZ713+bgbOO+GXROufUFdxWo7NjJbGQ285x3N gene.liverman@ltnglobal.com" - ]; }; zramSwap = { diff --git a/modules/hosts/nixos/nixnas1/default.nix b/modules/hosts/nixos/nixnas1/default.nix index 8cd4bbf..708ccba 100644 --- a/modules/hosts/nixos/nixnas1/default.nix +++ b/modules/hosts/nixos/nixnas1/default.nix @@ -118,9 +118,5 @@ isNormalUser = true; description = "Gene Liverman"; extraGroups = [ "wheel" ]; - openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFvLaPTfG3r+bcbI6DV4l69UgJjnwmZNCQk79HXyf1Pt gene@rainbow-planet" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIp42X5DZ713+bgbOO+GXROufUFdxWo7NjJbGQ285x3N gene.liverman@ltnglobal.com" - ]; }; } diff --git a/modules/hosts/nixos/nixnuc/default.nix b/modules/hosts/nixos/nixnuc/default.nix index 7a60849..c3e1fb1 100644 --- a/modules/hosts/nixos/nixnuc/default.nix +++ b/modules/hosts/nixos/nixnuc/default.nix @@ -624,11 +624,6 @@ in { description = "Gene Liverman"; extraGroups = [ "docker" "podman" "networkmanager" "wheel" ]; linger = true; - openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFvLaPTfG3r+bcbI6DV4l69UgJjnwmZNCQk79HXyf1Pt gene@rainbow-planet" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ6bRxR9wmwO1AcKjO2gRk6oxbIoDLI3KQL7sj92sN0K Gene on BigBoy" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIp42X5DZ713+bgbOO+GXROufUFdxWo7NjJbGQ285x3N gene.liverman@ltnglobal.com" - ]; }; # Enable common container config files in /etc/containers