mirror of
https://github.com/Nickiel12/nicks-nix-config.git
synced 2024-11-26 14:45:29 -08:00
66 lines
1.4 KiB
Nix
66 lines
1.4 KiB
Nix
|
|
{ config, lib, pkgs, ... }:
|
|
|
|
|
|
{
|
|
imports = [
|
|
(import ./hardware-configuration.nix)
|
|
(import ./containers/nextcloud.nix)
|
|
(import ./modules/nginx.nix)
|
|
];
|
|
|
|
environment.systemPackages = [
|
|
pkgs.mdadm
|
|
pkgs.cloudflared
|
|
];
|
|
|
|
networking = {
|
|
nat = {
|
|
enable = true;
|
|
internalInterfaces = ["ve-+"];
|
|
externalInterface = "enp2s0"; # Make sure this is actually set to your internet adapter
|
|
# You can find a list with `ip a` and look for the first identifier after the number (e.g.: 1: enp2s0)
|
|
|
|
# Lazy IPv6 connectivity for the container
|
|
enableIPv6 = true;
|
|
|
|
#forwardPorts = [
|
|
#{
|
|
# sourcePort = 80;
|
|
# proto = "tcp";
|
|
# destination = "192.168.100.11:80";
|
|
#}
|
|
#];
|
|
};
|
|
firewall = {
|
|
enable = true;
|
|
allowedTCPPorts = [80 443];
|
|
};
|
|
};
|
|
|
|
services = {
|
|
sshd.enable = true;
|
|
openssh.settings = {
|
|
PermitRootLogin = "no";
|
|
X11Forwarding = true;
|
|
};
|
|
};
|
|
systemd.services.sshd.wantedBy = [ "multi-user.target" ];
|
|
|
|
boot.initrd.services.swraid.mdadmConf = builtins.readFile ./rsrcs/mdadm.conf;
|
|
boot.loader = {
|
|
systemd-boot.enable = true;
|
|
efi = {
|
|
canTouchEfiVariables = true;
|
|
efiSysMountPoint = "/boot/efi";
|
|
};
|
|
};
|
|
|
|
|
|
programs.msmtp = {
|
|
enable = true;
|
|
};
|
|
environment.etc."mdadm.conf".text = ''
|
|
MAILADDR nicholasyoungsumner@gmail.com
|
|
'';
|
|
}
|