Simon Bruder
cb913a9b00
This also adds secrets management for nginx. It is far from perfect (e.g. nginx does not get reloaded when a secret changes).
36 lines
574 B
Nix
36 lines
574 B
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
../../modules
|
|
../../users/simon
|
|
];
|
|
|
|
sbruder = {
|
|
cpu.intel.enable = true;
|
|
gpu.amd.enable = true;
|
|
gui.enable = true;
|
|
libvirt.enable = true;
|
|
media-proxy.enable = true;
|
|
restic = {
|
|
enable = true;
|
|
extraPaths = [
|
|
"/data"
|
|
];
|
|
};
|
|
ssd.enable = true;
|
|
wireguard.home = {
|
|
enable = true;
|
|
address = "10.80.0.5";
|
|
};
|
|
};
|
|
|
|
services.tor = {
|
|
enable = true;
|
|
client.enable = true;
|
|
};
|
|
|
|
networking.hostName = "sayuri";
|
|
}
|