68 lines
1.3 KiB
Nix
68 lines
1.3 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
let primary-ip = "10.0.0.21";
|
|
|
|
in {
|
|
config = {
|
|
networking = {
|
|
useDHCP = false;
|
|
|
|
defaultGateway = {
|
|
address = "10.0.0.1";
|
|
interface = "intif0";
|
|
};
|
|
|
|
interfaces.intif0 = {
|
|
useDHCP = false;
|
|
ipv4.addresses = [{
|
|
address = primary-ip;
|
|
prefixLength = 16;
|
|
}];
|
|
};
|
|
};
|
|
|
|
fudo.secrets = {
|
|
secret-group = "fudo-secrets";
|
|
secret-users = [ "niten" ];
|
|
secret-paths = [ "/state/secrets" ];
|
|
};
|
|
|
|
systemd.tmpfiles.rules = [
|
|
"L /etc/adjtime - - - - /state/etc/adjtime"
|
|
];
|
|
|
|
environment = {
|
|
systemPackages = with pkgs; [
|
|
nixopsUnstable
|
|
];
|
|
etc = {
|
|
NIXOS.source = "/state/etc/NIXOS";
|
|
};
|
|
};
|
|
|
|
system.stateVersion = "21.05";
|
|
|
|
security.sudo.extraConfig = ''
|
|
# rollback results in sudo lectures after each reboot
|
|
Defaults lecture = never
|
|
'';
|
|
|
|
services = {
|
|
openssh = {
|
|
hostKeys = [
|
|
{
|
|
path = "/state/ssh/ssh_host_ed25519_key";
|
|
type = "ed25519";
|
|
}
|
|
{
|
|
path = "/state/ssh/ssh_host_rsa_key";
|
|
type = "rsa";
|
|
bits = 4096;
|
|
}
|
|
];
|
|
};
|
|
};
|
|
};
|
|
}
|