chore: moved all config out of hive.nix and full nixfmt
This commit is contained in:
parent
bc23fda1c2
commit
7f5761a250
18 changed files with 366 additions and 352 deletions
|
@ -2,24 +2,36 @@
|
|||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
ssh-keys,
|
||||
...
|
||||
}:
|
||||
{
|
||||
imports = [ ./hardware-configuration.nix ];
|
||||
|
||||
boot.loader = {
|
||||
systemd-boot.enable = true;
|
||||
efi.canTouchEfiVariables = true;
|
||||
deployment = {
|
||||
targetHost = "virt.kat";
|
||||
tags = [ "kat-vms" ];
|
||||
};
|
||||
|
||||
kat.proxies = {
|
||||
ip = "192.168.122.2";
|
||||
open-tcp = [
|
||||
{
|
||||
internal = 22;
|
||||
external = 22000;
|
||||
}
|
||||
];
|
||||
imports = [ ./hardware-configuration.nix ];
|
||||
|
||||
boot = {
|
||||
loader = {
|
||||
systemd-boot.enable = true;
|
||||
efi.canTouchEfiVariables = true;
|
||||
};
|
||||
kernelParams = [ "console=ttyS0" ];
|
||||
};
|
||||
|
||||
kat = {
|
||||
fqdn = "degette.katvayor.net";
|
||||
proxies = {
|
||||
ip = "192.168.122.2";
|
||||
open-tcp = [
|
||||
{
|
||||
internal = 22;
|
||||
external = 22000;
|
||||
}
|
||||
];
|
||||
};
|
||||
};
|
||||
|
||||
systemd.network.enable = lib.mkForce false;
|
||||
|
@ -51,23 +63,28 @@
|
|||
];
|
||||
};
|
||||
|
||||
services.openssh.enable = true;
|
||||
services = {
|
||||
openssh.enable = true;
|
||||
qemuGuest.enable = true;
|
||||
nginx = {
|
||||
enable = true;
|
||||
virtualHosts."degette.katvayor.net" = {
|
||||
enableACME = true;
|
||||
addSSL = true;
|
||||
locations."/" = {
|
||||
recommendedProxySettings = true;
|
||||
proxyPass = "http://localhost:8000/";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
users.users.root.openssh.authorizedKeys.keys = with ssh-keys; sylvain ++ gaby;
|
||||
|
||||
security.acme = {
|
||||
acceptTerms = true;
|
||||
defaults.email = "root@katvayor.net";
|
||||
};
|
||||
services.nginx = {
|
||||
enable = true;
|
||||
virtualHosts."degette.katvayor.net" = {
|
||||
enableACME = true;
|
||||
addSSL = true;
|
||||
locations."/" = {
|
||||
recommendedProxySettings = true;
|
||||
proxyPass = "http://localhost:8000/";
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
networking.firewall.enable = false;
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue