Simon Bruder
ebfa0ec16a
Sadly, they are so interconnected, that it is not easily possible to migrate it in smaller steps. It should be refactored to make them more modularised and independent of each other.
56 lines
1.2 KiB
Nix
56 lines
1.2 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
../../modules
|
|
../../users/simon
|
|
|
|
./services/binary-cache.nix
|
|
./services/dnsmasq.nix
|
|
./services/fritzbox-exporter.nix
|
|
./services/media-backup.nix
|
|
./services/media.nix
|
|
./services/scan.nix
|
|
./services/torrent.nix
|
|
./services/wordclock-dimmer.nix
|
|
];
|
|
|
|
sbruder = {
|
|
wireguard.home.enable = true;
|
|
nginx.hardening.enable = true;
|
|
restic.system = {
|
|
enable = true;
|
|
extraPaths = [
|
|
"/data"
|
|
];
|
|
extraExcludes = [
|
|
"/data/media/video"
|
|
"/data/misc"
|
|
"/data/torrent"
|
|
];
|
|
prune = true;
|
|
};
|
|
unfree.allowSoftware = true;
|
|
};
|
|
|
|
services.nginx = {
|
|
enable = true;
|
|
|
|
recommendedGzipSettings = true;
|
|
recommendedOptimisation = true;
|
|
recommendedProxySettings = true;
|
|
recommendedTlsSettings = true;
|
|
|
|
virtualHosts."fuuko.home.sbruder.de" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
};
|
|
};
|
|
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
|
systemd.services.nginx.serviceConfig.SupplementaryGroups = lib.singleton "keys";
|
|
|
|
networking.hostName = "fuuko";
|
|
|
|
system.stateVersion = "20.09";
|
|
}
|