blob: 7bdb4d06f096d723dad5965c3940f58fab6189c5 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
|
{config, ...}: {
imports = [
./networking.nix # network configuration that just works
./hardware.nix
];
sils = {
gallery = {
enable = true;
domain = "gallery.s-schoeffel.de";
};
};
vhack = {
back = {
enable = true;
repositories = {
"${config.services.gitolite.dataDir}/repositories/vhack.eu/nixos-server.git" = {
domain = "issues.foss-syndicate.org";
port = 9220;
};
};
};
backup = {
enable = true;
privateSshKey = ./secrets/backupssh.age;
privatePassword = ./secrets/backuppass.age;
user = "u384702-sub3";
};
fail2ban.enable = true;
git-server = {
enable = true;
domain = "git.foss-syndicate.org";
gitolite.adminPubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIME4ZVa+IoZf6T3U08JG93i6QIAJ4amm7mkBzO14JSkz cardno:000F_18F83532";
};
invidious-router = {
enable = true;
domain = "invidious-router.vhack.eu";
extraDomains = [
"video.fosswelt.org"
"invidious-router.sils.li"
];
};
mail = {
enable = true;
fqdn = "mail.foss-syndicate.org";
};
nginx = {
enable = true;
redirects = {
"source.foss-syndicate.org" = "https://git.foss-syndicate.org/vhack.eu/nixos-server";
};
};
nixconfig.enable = true;
openssh.enable = true;
persist = {
enable = true;
directories = [
"/var/log"
];
};
redlib.enable = true;
rust-motd.enable = true;
users.enable = true;
};
boot.tmp.cleanOnBoot = true;
zramSwap.enable = true;
networking.hostName = "server2";
networking.domain = "vhack.eu";
system.stateVersion = "24.11";
}
|