zotan/nixfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Update atlantis config

Browse source
This commit is contained in:
Laura Hausmann 2022-03-17 23:31:26 +01:00
parent d3c0b4cf3c
commit 238f4a7b25
Signed by: zotan
GPG key ID: D044E84C5BE01605
1 changed files with 64 additions and 39 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

103
atlantis.nix
View file

@ -1,40 +1,80 @@
{ config, pkgs, ... }: { config, pkgs, ... }:
{ {
imports = imports = [
[ ./hardware-configuration.nix
./hardware-configuration.nix ];
];
boot.loader.grub.enable = true; boot.loader.grub.enable = true;
boot.loader.grub.version = 2; boot.loader.grub.version = 2;
boot.loader.grub.device = "/dev/vda"; boot.loader.grub.device = "/dev/vda";
networking.hostName = "atlantis.zotan.network"; boot.kernel.sysctl."net.core.rmem_max" = 2500000;
boot.kernel.sysctl."kernel.hostname" = "atlantis.zotan.network";
networking = {
hostName = ""; # no FQDN support :(
useDHCP = false;
interfaces.enp1s0.ipv4.addresses = [{
address = "10.42.0.7";
prefixLength = 24;
}];
interfaces.enp1s0.ipv6.addresses = [{
address = "2a01:4f8:241:5bb4:acab::2";
prefixLength = 64;
}];
defaultGateway = {
address = "116.202.163.154";
interface = "enp1s0";
};
defaultGateway6 = {
address = "fe80::1";
interface = "enp1s0";
};
nameservers = ["1.1.1.1"];
firewall = {
allowedTCPPorts = [ 80 443 ];
allowedUDPPorts = [ 443 ];
package = pkgs.iptables-nftables-compat;
};
};
time.timeZone = "Europe/Berlin"; time.timeZone = "Europe/Berlin";
networking.useDHCP = false; security.sudo.wheelNeedsPassword = false;
networking.interfaces.enp1s0.ipv4.addresses = [{
address = "10.42.0.7";
prefixLength = 24;
}];
networking.interfaces.enp1s0.ipv6.addresses = [{ users = {
address = "2a01:4f8:241:5bb4:acab::2"; mutableUsers = false;
prefixLength = 64; users = {
}]; zotan = {
home = "/home/zotan";
isNormalUser = true;
extraGroups = [ "wheel" ];
hashedPassword = "$6$iKwOP5T6P8BV0sHt$f2xjotyDs7ohIgzDq7ypHiQU.hI6evfgbAuOyMoId3aNj/6MDuo7AgmCBF.7Y0BnL/rNcXBqDXjNSWf6xtRwp.";
openssh = {
authorizedKeys = {
keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKWDArL4+m9kUmLyWcmUby5+CVrmBThP0KbQWep32+BF laura@zotan.network"];
};
};
};
networking.defaultGateway.address = "116.202.163.154"; root = {
networking.defaultGateway.interface = "enp1s0"; hashedPassword = "$6$Zu.eBdDB1fhE4tKR$gZ6wgCaWZxhI.BLyONpwifH3vRoYcJ8/84n.cWJgZiItF09XZdajvqm8tvM19zCBqDqdBMFpeqF3.DWEfv7Ul0";
networking.defaultGateway6.address = "fe80::1"; openssh = {
networking.defaultGateway6.interface = "enp1s0"; authorizedKeys = {
networking.nameservers = ["1.1.1.1"]; keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKWDArL4+m9kUmLyWcmUby5+CVrmBThP0KbQWep32+BF laura@zotan.network"];
};
};
};
users.users.zotan = { php = {
home = "/home/zotan"; isSystemUser = true;
isNormalUser = true; createHome = false;
extraGroups = [ "wheel" ]; group = "php";
};
};
groups.php = {};
}; };
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
@ -49,8 +89,6 @@
passwordAuthentication = false; passwordAuthentication = false;
}; };
users.users.root.openssh.authorizedKeys.keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKWDArL4+m9kUmLyWcmUby5+CVrmBThP0KbQWep32+BF laura@zotan.network"];
services.caddy = { services.caddy = {
enable = true; enable = true;
globalConfig = '' globalConfig = ''
@ -63,7 +101,7 @@
virtualHosts = { virtualHosts = {
"h3.zotan.pw" = { "h3.zotan.pw" = {
extraConfig = '' extraConfig = ''
root * /var/www/sites/zotan.pw root * ${(builtins.fetchGit { url = "https://git.ztn.sh/zotan/zotan.pw-web.git"; ref = "dev"; name = "zotan.pw-web-${toString __currentTime}"; }).outPath}
encode gzip zstd encode gzip zstd
try_files /blog/posts/{path} {path}.php try_files /blog/posts/{path} {path}.php
@ -117,18 +155,5 @@
}; };
}; };
users.users.php = {
isSystemUser = true;
createHome = false;
group = "php";
};
users.groups.php = {};
networking.firewall.allowedTCPPorts = [ 80 443 ];
networking.firewall.allowedUDPPorts = [ 443 ];
networking.firewall.package = pkgs.iptables-nftables-compat;
system.stateVersion = "21.11"; # Leave this alone system.stateVersion = "21.11"; # Leave this alone
} }