Simon Bruder
444aa962b5
This now mostly replaces ayu, which has been sitting between upstream and the switch the last 6 months. It now also configures routing over Mullvad, which also finally enables IPv6 (I don’t understand how people get away with not providing it natively in 2023). Once I get a WLAN card, it will also host its own access point, which currently still relies on ayu as “dumb AP” (as OpenWRT calls it).
54 lines
1.2 KiB
Nix
54 lines
1.2 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
../../modules
|
|
../../users/simon
|
|
|
|
./services/co2_exporter.nix
|
|
./services/languagetool.nix
|
|
./services/media-backup.nix
|
|
./services/media.nix
|
|
./services/router.nix
|
|
./services/torrent.nix
|
|
];
|
|
|
|
sbruder = {
|
|
wireguard.home.enable = true;
|
|
nginx.hardening.enable = true;
|
|
restic.system = {
|
|
enable = true;
|
|
uploadLimit = 1500;
|
|
extraPaths = [
|
|
"/data"
|
|
];
|
|
extraExcludes = [
|
|
"/data/media/video"
|
|
"/data/misc"
|
|
"/data/torrent"
|
|
];
|
|
prune = true;
|
|
};
|
|
unfree.allowSoftware = true;
|
|
};
|
|
|
|
services.nginx = {
|
|
enable = true;
|
|
|
|
recommendedGzipSettings = true;
|
|
recommendedOptimisation = true;
|
|
recommendedProxySettings = true;
|
|
recommendedTlsSettings = true;
|
|
};
|
|
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
|
systemd.services.nginx.serviceConfig.SupplementaryGroups = lib.singleton "keys";
|
|
|
|
services.syncthing.enable = true;
|
|
|
|
services.udisks2.enable = true; # does not have gui, but often deals with removable storage
|
|
|
|
networking.hostName = "fuuko";
|
|
|
|
system.stateVersion = "20.09";
|
|
}
|