hosts/by-name/server1/configuration.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

{config, ...}: {
  imports = [
    ./networking.nix # network configuration that just works
    ./hardware.nix

    ../../../system
  ];

  vhack = {
    backup = {
      enable = true;
      privateSshKey = ./secrets/backupssh.age;
      privatePassword = ./secrets/backuppass.age;
      user = "u384702-sub2";
    };
    etesync.enable = true;
    nginx.enable = true;
    openssh.enable = true;
    postgresql.enable = true;
    redlib.enable = true;
    users.enable = true;
    persist = {
      enable = true;
      directories = [
        "/var/log"

        # TODO(@bpeetz): Instead of persisting that, encode each uid/gid directly in the
        # config. <2024-12-24>
        "/var/lib/nixos"
      ];
    };
  };

  boot.tmp.cleanOnBoot = true;
  zramSwap.enable = true;
  networking.hostName = "server1";
  networking.domain = "vhack.eu";

  system.stateVersion = "22.11";
}