106 lines
2.1 KiB
Nix
106 lines
2.1 KiB
Nix
{pkgs, ...}: {
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
];
|
|
|
|
boot = {
|
|
# kernel is defined in `groups/servers/default.nix`
|
|
kernelParams = ["console=ttyS0,19200n8"];
|
|
|
|
loader = {
|
|
timeout = 10;
|
|
grub = {
|
|
enable = true;
|
|
forceInstall = true;
|
|
device = "nodev";
|
|
extraConfig = ''
|
|
serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
|
|
terminal_input serial;
|
|
terminal_output serial
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
|
|
networking.hostName = "delphinus";
|
|
|
|
networking = {
|
|
networkmanager.enable = true;
|
|
usePredictableInterfaceNames = false;
|
|
useDHCP = false;
|
|
|
|
interfaces.eth0 = {
|
|
useDHCP = true;
|
|
|
|
# linode expects ipv6 privacy extensions to be disabled:
|
|
# https://www.linode.com/docs/guides/manual-network-configuration/#static-vs-dynamic-addressing
|
|
tempAddress = "disabled";
|
|
};
|
|
|
|
nftables.enable = true;
|
|
|
|
firewall = {
|
|
enable = true;
|
|
allowedTCPPorts = [
|
|
4070
|
|
];
|
|
allowedUDPPorts = [];
|
|
};
|
|
};
|
|
|
|
time.timeZone = "Europe/Amsterdam";
|
|
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
console = {
|
|
font = "Lat2-Terminus16";
|
|
keyMap = "us";
|
|
};
|
|
|
|
services = {
|
|
openssh = {
|
|
enable = true;
|
|
|
|
ports = [4070];
|
|
settings = {
|
|
PasswordAuthentication = false;
|
|
PermitRootLogin = "no";
|
|
AllowUsers = ["foxora"];
|
|
UseDns = false; # enables rDNS lookup
|
|
X11Forwarding = false;
|
|
};
|
|
};
|
|
};
|
|
|
|
users.users.foxora = {
|
|
isNormalUser = true;
|
|
extraGroups = ["wheel"];
|
|
|
|
openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPGwai/gXJOJZQujpk0BSwdjSe2as3pT567bYhzjaQ4M aurora@nixarawrui"
|
|
];
|
|
|
|
packages = with pkgs; [];
|
|
};
|
|
|
|
programs = {
|
|
nh = {
|
|
enable = true;
|
|
clean.enable = true;
|
|
clean.extraArgs = "--keep-since 7d --keep 3";
|
|
};
|
|
};
|
|
|
|
environment = {
|
|
systemPackages = with pkgs; [
|
|
neovim
|
|
git
|
|
wget
|
|
];
|
|
|
|
variables = {
|
|
EDITOR = "nvim";
|
|
};
|
|
};
|
|
|
|
system.stateVersion = "25.11";
|
|
}
|