bill
/
deployed-nixos-server-and-apps
1
1
Fork 0
Code

Compare commits

base: bill:a2823157c1c066bd41e67faf1c2a38f1b9767b61
Branches Tags
bill:main
..
compare: bill:e89457874cb4902e6191d59f5170b65dab9423b1
Branches Tags
bill:main

No commits in common. "a2823157c1c066bd41e67faf1c2a38f1b9767b61" and "e89457874cb4902e6191d59f5170b65dab9423b1" have entirely different histories.
a2823157c1 ... e89457874c

1 changed files with 16 additions and 38 deletions
Show Stats Expand all files Collapse all files

54
server-config/configuration.nix
View File

@ -2,19 +2,14 @@
# your system. Help is available in the configuration.nix(5) man page # your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’). # and in the NixOS manual (accessible by running ‘nixos-help’).
{ { inputs, config, pkgs, lib, ... }:
inputs,
config,
pkgs,
lib,
...
}:
{ {
imports = [ imports =
# Include the results of the hardware scan. [
./hardware-configuration.nix # Include the results of the hardware scan.
]; ./hardware-configuration.nix
];
# Use the GRUB 2 boot loader. # Use the GRUB 2 boot loader.
boot.loader.grub.enable = true; boot.loader.grub.enable = true;
@ -41,15 +36,9 @@
auto-optimise-store = true; auto-optimise-store = true;
# Required by Cachix to be used as non-root user # Required by Cachix to be used as non-root user
trusted-users = [ trusted-users = [ "root" "alice" ];
"root"
"alice"
];
experimental-features = [ experimental-features = [ "nix-command" "flakes" ];
"nix-command"
"flakes"
];
}; };
extraOptions = '' extraOptions = ''
@ -75,27 +64,21 @@
isNormalUser = true; isNormalUser = true;
home = "/home/alice"; home = "/home/alice";
description = "Alice Foobar"; description = "Alice Foobar";
extraGroups = [ extraGroups = [ "wheel" "networkmanager" ];
"wheel"
"networkmanager"
];
packages = with pkgs; [ packages = with pkgs; [
tldr tldr
]; ];
hashedPassword = "$y$j9T$7AufeqRXQaD9CxeBmwBUt0$.qNf/QdO5BGc0peHvHzDQqs1B48D0pYw9PhIDzcYAK8"; hashedPassword = "$y$j9T$7AufeqRXQaD9CxeBmwBUt0$.qNf/QdO5BGc0peHvHzDQqs1B48D0pYw9PhIDzcYAK8";
openssh.authorizedKeys.keys = [ openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGzXqcOu6/EjS60Ke55w4hj//lY6u3S1DYPoSd7yjdR3 alice@foobar" ];
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGzXqcOu6/EjS60Ke55w4hj//lY6u3S1DYPoSd7yjdR3 alice@foobar"
];
}; };
# List packages installed in system profile. To search, run: # List packages installed in system profile. To search, run:
# $ nix search wget # $ nix search wget
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
busybox wget
git git
kitty kitty
screen
wget
# Linode tools # Linode tools
inetutils inetutils
@ -106,11 +89,9 @@
# Enable Nix-ld for remote VSCode SSH to work # Enable Nix-ld for remote VSCode SSH to work
programs.nix-ld.enable = true; programs.nix-ld.enable = true;
environment.variables = { environment.variables = {
NIX_LD_LIBRARY_PATH = lib.mkDefault ( NIX_LD_LIBRARY_PATH = lib.mkDefault (lib.makeLibraryPath [
lib.makeLibraryPath [ pkgs.stdenv.cc.cc
pkgs.stdenv.cc.cc ]);
]
);
NIX_LD = lib.mkDefault (lib.fileContents "${pkgs.stdenv.cc}/nix-support/dynamic-linker"); NIX_LD = lib.mkDefault (lib.fileContents "${pkgs.stdenv.cc}/nix-support/dynamic-linker");
}; };
@ -123,10 +104,7 @@
}; };
# Open ports in the firewall. # Open ports in the firewall.
networking.firewall.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [ 80 443 ];
80
443
];
networking.useDHCP = false; networking.useDHCP = false;
networking.interfaces.eth0.useDHCP = true; networking.interfaces.eth0.useDHCP = true;