infrastructure/machines/storage01/_configuration.nix

{ lib, ... }:

lib.extra.mkConfig {
  enabledModules = [
    # List of modules to enable
    "dgn-backups"
    "dgn-fail2ban"
    "dgn-web"
  ];

  enabledServices = [
    # List of services to enable
    "atticd"
    "tvix-cache"
    "forgejo"
    "forgejo-runners"
    "garage"
    "influxdb"
    "netbird"
    "peertube"
    "prometheus"
  ];

  extraConfig = {
    dgn-fail2ban.jails.sshd-preauth.enabled = true;

    dgn-hardware.useZfs = true;

    services.netbird.enable = true;
  };

  root = ./.;
}