2021-03-13 15:32:44 +01:00
|
|
|
|
{ config, pkgs, ... }:
|
|
|
|
|
|
|
|
|
|
|
|
{
|
|
|
|
|
|
imports = [
|
|
|
|
|
|
../modules
|
|
|
|
|
|
];
|
|
|
|
|
|
|
|
|
|
|
|
boot.cleanTmpDir = true;
|
2021-04-12 14:02:52 +02:00
|
|
|
|
networking.firewall.enable = true;
|
2021-03-13 15:32:44 +01:00
|
|
|
|
networking.firewall.allowPing = true;
|
|
|
|
|
|
networking.useDHCP = false;
|
|
|
|
|
|
|
|
|
|
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
|
|
|
|
console = {
|
|
|
|
|
|
font = "Lat2-Terminus16";
|
|
|
|
|
|
keyMap = "de-latin1-nodeadkeys";
|
|
|
|
|
|
};
|
|
|
|
|
|
time.timeZone = "Europe/Berlin";
|
|
|
|
|
|
|
|
|
|
|
|
system.autoUpgrade.enable = false;
|
|
|
|
|
|
system.autoUpgrade.allowReboot = false;
|
|
|
|
|
|
|
|
|
|
|
|
networking.domain = "net.entr0py.de";
|
|
|
|
|
|
networking.nameservers = [ "2a02:2970:1002::18" "46.182.19.48" "2001:1608:10:25::9249:d69b" "84.200.70.40" ];
|
|
|
|
|
|
networking.extraHosts =
|
|
|
|
|
|
''
|
|
|
|
|
|
2001:638:904:ffcb::5 scotty-router
|
|
|
|
|
|
'';
|
|
|
|
|
|
|
|
|
|
|
|
# Define a user account. Don't forget to set a password with ‘passwd’.
|
|
|
|
|
|
users.users.garionion = {
|
|
|
|
|
|
isNormalUser = true;
|
|
|
|
|
|
hashedPassword = "$6$NMzXsfARs2HVA4iq$55uxWCANME/HsjIg9HmZyxqGwlr7RpJfCcMad2OhbmUiHhdnOh/v9TDwT3Vt0mu9HE37Fh3b1g2yyEa3Dxxg80";
|
|
|
|
|
|
extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
|
|
|
|
|
|
openssh.authorizedKeys.keys = ["ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAGw3Yuee8oSXSEqmoMzrqQrUizKV9sJbJMxAUC01wxvbxevAqFEpiGrznnu3K0HN3sfKItjqGkNDPDQ+mIlQwdwJAE0GyJIx9CMvo1RPugKSJ5rFh/vEgJTNMPaeYUb/L2rn3WEZHrZI5wwf+z4ljSHCVetAnaMKjk/+QQWgBHdvNImmA== matze@darwin"];
|
|
|
|
|
|
};
|
|
|
|
|
|
users.users.root.openssh.authorizedKeys.keys = [
|
|
|
|
|
|
"ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAGw3Yuee8oSXSEqmoMzrqQrUizKV9sJbJMxAUC01wxvbxevAqFEpiGrznnu3K0HN3sfKItjqGkNDPDQ+mIlQwdwJAE0GyJIx9CMvo1RPugKSJ5rFh/vEgJTNMPaeYUb/L2rn3WEZHrZI5wwf+z4ljSHCVetAnaMKjk/+QQWgBHdvNImmA== matze@darwin"
|
|
|
|
|
|
];
|
|
|
|
|
|
|
|
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
|
|
|
|
wget vim screen mtr iperf
|
|
|
|
|
|
htop dstat dnsutils nettools tcpdump
|
|
|
|
|
|
git zsh oh-my-zsh spaceship-prompt
|
|
|
|
|
|
];
|
|
|
|
|
|
|
|
|
|
|
|
# Enable the OpenSSH daemon.
|
|
|
|
|
|
services.openssh = {
|
|
|
|
|
|
enable = true;
|
|
|
|
|
|
ports = [1022];
|
|
|
|
|
|
passwordAuthentication = false;
|
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
security.acme.acceptTerms = true;
|
|
|
|
|
|
security.acme.email = "letsencrypt@entr0py.de";
|
|
|
|
|
|
|
|
|
|
|
|
# This value determines the NixOS release from which the default
|
|
|
|
|
|
# settings for stateful data, like file locations and database versions
|
|
|
|
|
|
# on your system were taken. It‘s perfectly fine and recommended to leave
|
|
|
|
|
|
# this value at the release version of the first install of this system.
|
|
|
|
|
|
# Before changing this value read the documentation for this option
|
|
|
|
|
|
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
|
|
|
|
|
system.stateVersion = "21.03"; # Did you read the comment?
|
|
|
|
|
|
}
|
