bill
/
deployed-nixos-server-and-apps
1
1
Fork 0
Code

Formatting

main
Bill Ewanick 2025-07-20 22:23:21 -04:00
parent 705abf2189
commit 76a14c35fc
1 changed files with 36 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

52
server-config/configuration.nix
View File

@ -2,14 +2,19 @@
# your system. Help is available in the configuration.nix(5) man page # your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’). # and in the NixOS manual (accessible by running ‘nixos-help’).
{ inputs, config, pkgs, lib, ... }: {
inputs,
config,
pkgs,
lib,
...
}:
{ {
imports = imports = [
[ # Include the results of the hardware scan.
# Include the results of the hardware scan. ./hardware-configuration.nix
./hardware-configuration.nix ];
];
# Use the GRUB 2 boot loader. # Use the GRUB 2 boot loader.
boot.loader.grub.enable = true; boot.loader.grub.enable = true;
@ -36,9 +41,15 @@
auto-optimise-store = true; auto-optimise-store = true;
# Required by Cachix to be used as non-root user # Required by Cachix to be used as non-root user
trusted-users = [ "root" "alice" ]; trusted-users = [
"root"
"alice"
];
experimental-features = [ "nix-command" "flakes" ]; experimental-features = [
"nix-command"
"flakes"
];
}; };
extraOptions = '' extraOptions = ''
@ -64,19 +75,23 @@
isNormalUser = true; isNormalUser = true;
home = "/home/alice"; home = "/home/alice";
description = "Alice Foobar"; description = "Alice Foobar";
extraGroups = [ "wheel" "networkmanager" ]; extraGroups = [
"wheel"
"networkmanager"
];
packages = with pkgs; [ packages = with pkgs; [
tldr tldr
]; ];
hashedPassword = "$y$j9T$7AufeqRXQaD9CxeBmwBUt0$.qNf/QdO5BGc0peHvHzDQqs1B48D0pYw9PhIDzcYAK8"; hashedPassword = "$y$j9T$7AufeqRXQaD9CxeBmwBUt0$.qNf/QdO5BGc0peHvHzDQqs1B48D0pYw9PhIDzcYAK8";
openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGzXqcOu6/EjS60Ke55w4hj//lY6u3S1DYPoSd7yjdR3 alice@foobar" ]; openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGzXqcOu6/EjS60Ke55w4hj//lY6u3S1DYPoSd7yjdR3 alice@foobar"
];
}; };
# List packages installed in system profile. To search, run: # List packages installed in system profile. To search, run:
# $ nix search wget # $ nix search wget
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
busybox busybox # nohup specifically
git git
kitty kitty
screen screen
@ -91,9 +106,11 @@
# Enable Nix-ld for remote VSCode SSH to work # Enable Nix-ld for remote VSCode SSH to work
programs.nix-ld.enable = true; programs.nix-ld.enable = true;
environment.variables = { environment.variables = {
NIX_LD_LIBRARY_PATH = lib.mkDefault (lib.makeLibraryPath [ NIX_LD_LIBRARY_PATH = lib.mkDefault (
pkgs.stdenv.cc.cc lib.makeLibraryPath [
]); pkgs.stdenv.cc.cc
]
);
NIX_LD = lib.mkDefault (lib.fileContents "${pkgs.stdenv.cc}/nix-support/dynamic-linker"); NIX_LD = lib.mkDefault (lib.fileContents "${pkgs.stdenv.cc}/nix-support/dynamic-linker");
}; };
@ -106,7 +123,10 @@
}; };
# Open ports in the firewall. # Open ports in the firewall.
networking.firewall.allowedTCPPorts = [ 80 443 ]; networking.firewall.allowedTCPPorts = [
80
443
];
networking.useDHCP = false; networking.useDHCP = false;
networking.interfaces.eth0.useDHCP = true; networking.interfaces.eth0.useDHCP = true;