infrastructure/machines/vault01/_configuration.nix

{ lib, ... }:

lib.extra.mkConfig {
  enabledModules = [
    # List of modules to enable
  ];

  enabledServices = [
    # List of services to enable
    "k-radius"
    "networking"
    "ups"
    "ulogd"
  ];

  extraConfig = {
    services.netbird.enable = true;
    services.nginx.enable = true;
    networking.firewall.allowedTCPPorts = [ 80 ];
  };

  root = ./.;
}