bill
/
deployed-nixos-server-and-apps
1
1
Fork 0
Code

Compare commits

base: bill:e89457874cb4902e6191d59f5170b65dab9423b1
Branches Tags
bill:main
..
compare: bill:a2823157c1c066bd41e67faf1c2a38f1b9767b61
Branches Tags
bill:main

2 Commits
e89457874c ... a2823157c1

Author SHA1 Message Date
Bill Ewanick a2823157c1 Formatting 2025-07-20 22:23:21 -04:00
Bill Ewanick 705abf2189 Helpful utils 2025-07-20 22:22:54 -04:00
1 changed files with 38 additions and 16 deletions
Show Stats Expand all files Collapse all files

54
server-config/configuration.nix
View File

@ -2,14 +2,19 @@
# your system. Help is available in the configuration.nix(5) man page # your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’). # and in the NixOS manual (accessible by running ‘nixos-help’).
{ inputs, config, pkgs, lib, ... }: {
inputs,
config,
pkgs,
lib,
...
}:
{ {
imports = imports = [
[ # Include the results of the hardware scan.
# Include the results of the hardware scan. ./hardware-configuration.nix
./hardware-configuration.nix ];
];
# Use the GRUB 2 boot loader. # Use the GRUB 2 boot loader.
boot.loader.grub.enable = true; boot.loader.grub.enable = true;
@ -36,9 +41,15 @@
auto-optimise-store = true; auto-optimise-store = true;
# Required by Cachix to be used as non-root user # Required by Cachix to be used as non-root user
trusted-users = [ "root" "alice" ]; trusted-users = [
"root"
"alice"
];
experimental-features = [ "nix-command" "flakes" ]; experimental-features = [
"nix-command"
"flakes"
];
}; };
extraOptions = '' extraOptions = ''
@ -64,21 +75,27 @@
isNormalUser = true; isNormalUser = true;
home = "/home/alice"; home = "/home/alice";
description = "Alice Foobar"; description = "Alice Foobar";
extraGroups = [ "wheel" "networkmanager" ]; extraGroups = [
"wheel"
"networkmanager"
];
packages = with pkgs; [ packages = with pkgs; [
tldr tldr
]; ];
hashedPassword = "$y$j9T$7AufeqRXQaD9CxeBmwBUt0$.qNf/QdO5BGc0peHvHzDQqs1B48D0pYw9PhIDzcYAK8"; hashedPassword = "$y$j9T$7AufeqRXQaD9CxeBmwBUt0$.qNf/QdO5BGc0peHvHzDQqs1B48D0pYw9PhIDzcYAK8";
openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGzXqcOu6/EjS60Ke55w4hj//lY6u3S1DYPoSd7yjdR3 alice@foobar" ]; openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGzXqcOu6/EjS60Ke55w4hj//lY6u3S1DYPoSd7yjdR3 alice@foobar"
];
}; };
# List packages installed in system profile. To search, run: # List packages installed in system profile. To search, run:
# $ nix search wget # $ nix search wget
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
wget busybox
git git
kitty kitty
screen
wget
# Linode tools # Linode tools
inetutils inetutils
@ -89,9 +106,11 @@
# Enable Nix-ld for remote VSCode SSH to work # Enable Nix-ld for remote VSCode SSH to work
programs.nix-ld.enable = true; programs.nix-ld.enable = true;
environment.variables = { environment.variables = {
NIX_LD_LIBRARY_PATH = lib.mkDefault (lib.makeLibraryPath [ NIX_LD_LIBRARY_PATH = lib.mkDefault (
pkgs.stdenv.cc.cc lib.makeLibraryPath [
]); pkgs.stdenv.cc.cc
]
);
NIX_LD = lib.mkDefault (lib.fileContents "${pkgs.stdenv.cc}/nix-support/dynamic-linker"); NIX_LD = lib.mkDefault (lib.fileContents "${pkgs.stdenv.cc}/nix-support/dynamic-linker");
}; };
@ -104,7 +123,10 @@
}; };
# Open ports in the firewall. # Open ports in the firewall.
networking.firewall.allowedTCPPorts = [ 80 443 ]; networking.firewall.allowedTCPPorts = [
80
443
];
networking.useDHCP = false; networking.useDHCP = false;
networking.interfaces.eth0.useDHCP = true; networking.interfaces.eth0.useDHCP = true;