mirror of
https://github.com/kmein/niveum
synced 2026-03-16 10:11:08 +01:00
Kierán Meinhardt
de6408f28f
the old one did this: building '/nix/store/gqvr8gl8ayj9kgjnfr23ax0xpc3rnc34-unit-tinc.retiolum.service.drv'... error: executing '/nix/store/4xw8n979xpivdc46a9ndcvyhwgif00hz-bash-5.1-p16/bin/bash': Argument list too long error: builder for '/nix/store/gqvr8gl8ayj9kgjnfr23ax0xpc3rnc34-unit-tinc.retiolum.service.drv' failed with exit code 1 error: 1 dependencies of derivation '/nix/store/v2ld4847xyb49v7wjb3fvf6lkg2j755b-system-units.drv' failed to build error: 1 dependencies of derivation '/nix/store/bbl9qidw9z0gz56z7yrhfkxsawk5qi7x-etc.drv' failed to build
52 lines
1.1 KiB
Nix
52 lines
1.1 KiB
Nix
{
|
|
lib,
|
|
config,
|
|
pkgs,
|
|
...
|
|
}: let
|
|
inherit (import <niveum/lib>) kieran retiolumAddresses;
|
|
in {
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
<niveum/configs/monitoring.nix>
|
|
<niveum/configs/nix.nix>
|
|
<niveum/configs/save-space.nix>
|
|
<niveum/configs/spacetime.nix>
|
|
<niveum/configs/sshd.nix>
|
|
<retiolum/modules/retiolum>
|
|
];
|
|
|
|
nix.nixPath = ["/var/src"];
|
|
|
|
networking = {
|
|
firewall.allowedTCPPorts = [80 443];
|
|
hostName = "ful";
|
|
interfaces.enp0s3.useDHCP = true;
|
|
retiolum = retiolumAddresses.ful;
|
|
useDHCP = false;
|
|
};
|
|
|
|
system.stateVersion = "21.11";
|
|
|
|
services.nginx = {
|
|
enable = true;
|
|
recommendedGzipSettings = true;
|
|
recommendedOptimisation = true;
|
|
recommendedProxySettings = true;
|
|
recommendedTlsSettings = true;
|
|
sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
|
|
};
|
|
|
|
security.acme = {
|
|
acceptTerms = true;
|
|
defaults.email = kieran.email;
|
|
};
|
|
|
|
users.users.root.passwordFile = toString <system-secrets/root.password>;
|
|
|
|
environment.systemPackages = [pkgs.vim pkgs.git pkgs.tmux pkgs.python3];
|
|
|
|
# since 22.05 timeout fails?
|
|
systemd.services.systemd-networkd-wait-online.enable = false;
|
|
}
|