mirror of
https://github.com/genebean/dots.git
synced 2026-05-31 23:55:20 -04:00
Gene Liverman
d433d77ee1
- hetznix02: import shared ports, derive firewall via lib.pipe, wire node-exporter and nginx-exporter port references in monitoring.nix - kiosk-entryway: import shared ports, wire node-exporter port in monitoring.nix - kiosk-gene-desk: import shared ports, make node-exporter port explicit - bigboy, rainbow-planet: import shared ports for consistency Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
79 lines
1.7 KiB
Nix
79 lines
1.7 KiB
Nix
{
|
|
config,
|
|
inputs,
|
|
lib,
|
|
pkgs,
|
|
username,
|
|
...
|
|
}:
|
|
{
|
|
imports = [
|
|
../../../shared/nixos/nixroutes.nix
|
|
../../../shared/nixos/ports.nix
|
|
./disk-config.nix
|
|
./hardware-configuration.nix
|
|
./post-install
|
|
inputs.private-flake.nixosModules.private.hetznix02
|
|
];
|
|
|
|
system.stateVersion = "24.05";
|
|
|
|
boot = {
|
|
loader.grub = {
|
|
# no need to set devices, disko will add all devices that have a
|
|
# EF02 partition to the list already
|
|
# devices = [ ];
|
|
efiSupport = true;
|
|
efiInstallAsRemovable = true;
|
|
device = "nodev";
|
|
};
|
|
tmp.cleanOnBoot = true;
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
# podman-tui # status of containers in the terminal
|
|
# podman-compose
|
|
];
|
|
|
|
networking = {
|
|
firewall = {
|
|
allowedTCPPorts = lib.pipe config.dots.ports [
|
|
builtins.attrValues
|
|
(builtins.filter (e: e.openFirewall && e.protocol == "tcp"))
|
|
(map (e: e.port))
|
|
];
|
|
allowedUDPPorts = lib.pipe config.dots.ports [
|
|
builtins.attrValues
|
|
(builtins.filter (e: e.openFirewall && e.protocol == "udp"))
|
|
(map (e: e.port))
|
|
];
|
|
};
|
|
|
|
hostId = "89bbb3e6"; # head -c4 /dev/urandom | od -A none -t x4
|
|
|
|
networkmanager.enable = false;
|
|
useNetworkd = true;
|
|
};
|
|
|
|
programs.mtr.enable = true;
|
|
|
|
services = {
|
|
fail2ban.enable = true;
|
|
logrotate.enable = true;
|
|
udev.extraRules = ''
|
|
ATTR{address}=="96:00:03:ae:45:aa", NAME="eth0"
|
|
'';
|
|
};
|
|
|
|
users.users.${username} = {
|
|
isNormalUser = true;
|
|
description = "Gene Liverman";
|
|
extraGroups = [
|
|
"networkmanager"
|
|
"wheel"
|
|
];
|
|
linger = true;
|
|
};
|
|
|
|
zramSwap.enable = true;
|
|
}
|