insects/nix-config
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

treewide: format with nixfmt

Browse source
This commit is contained in:
insects 2024-09-22 10:56:40 +02:00
parent 303e982a8e
commit 26ad72592a
47 changed files with 380 additions and 725 deletions
Download patch file Download diff file Expand all files Collapse all files

41
servers/flake.nix
View file

@ -3,27 +3,24 @@
inputs.deploy-rs.url = "github:serokell/deploy-rs";
outputs =
{ self
, nixpkgs
, deploy-rs
,
}:
{
nixosConfigurations.lunasa = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
modules = [ ./lunasa/configuration.nix ];
};
deploy.nodes.lunasa = {
hostname = "lunasa";
sshUser = "root";
profiles.system = {
user = "root";
path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.lunasa;
};
};
checks = builtins.mapAttrs (system: deployLib: deployLib.deployChecks self.deploy) deploy-rs.lib;
outputs = { self, nixpkgs, deploy-rs, }: {
nixosConfigurations.lunasa = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
modules = [ ./lunasa/configuration.nix ];
};
deploy.nodes.lunasa = {
hostname = "lunasa";
sshUser = "root";
profiles.system = {
user = "root";
path = deploy-rs.lib.x86_64-linux.activate.nixos
self.nixosConfigurations.lunasa;
};
};
checks =
builtins.mapAttrs (system: deployLib: deployLib.deployChecks self.deploy)
deploy-rs.lib;
};
}

75
servers/lunasa/configuration.nix
View file

@ -1,5 +1,4 @@
{ modulesPath, pkgs, lib, ... }:
{
{ modulesPath, pkgs, lib, ... }: {
imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
networking.hostName = "lunasa";
@ -7,12 +6,8 @@
services.openssh.enable = true;
boot.tmp.cleanOnBoot = true;
boot.loader.grub.device = "/dev/sda";
boot.initrd.availableKernelModules = [
"ata_piix"
"uhci_hcd"
"xen_blkfront"
"vmw_pvscsi"
];
boot.initrd.availableKernelModules =
[ "ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi" ];
boot.initrd.kernelModules = [ "nvme" ];
fileSystems."/" = {
device = "/dev/sda1";
@ -24,17 +19,13 @@
settings = {
auto-optimise-store = lib.mkDefault true;
experimental-features = [
"nix-command"
"flakes"
"ca-derivations"
];
experimental-features = [ "nix-command" "flakes" "ca-derivations" ];
};
};
users.users.root.openssh.authorizedKeys.keys = [
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKoDv47WF/WGsIn47xdmkNeScQSF3yTzLhaZoR+kFUJy''
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOXWOPpEDdVUQEFLucXbxmOhW64QXbCu6lF8vRLlKyoT''
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKoDv47WF/WGsIn47xdmkNeScQSF3yTzLhaZoR+kFUJy"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOXWOPpEDdVUQEFLucXbxmOhW64QXbCu6lF8vRLlKyoT"
];
networking.firewall.allowedTCPPorts = [
@ -64,9 +55,7 @@
registration = {
allow-before-connect = true;
bcrypt-cost = 4;
email-verification = {
enabled = false;
};
email-verification = { enabled = false; };
enabled = true;
throttling = {
duration = "10m";
@ -77,9 +66,7 @@
};
channels = {
default-modes = "+ntC";
registration = {
enabled = true;
};
registration = { enabled = true; };
};
datastore = {
autoupgrade = true;
@ -103,10 +90,7 @@
};
tagmsg-storage = {
default = false;
whitelist = [
"+draft/react"
"+react"
];
whitelist = [ "+draft/react" "+react" ];
};
znc-maxmessages = 2048;
};
@ -118,34 +102,26 @@
nicklen = 32;
topiclen = 390;
};
network = {
name = "linacastellane";
};
network = { name = "linacastellane"; };
server = {
casemapping = "permissive";
check-ident = false;
enforce-utf = true;
enforce-utf8 = true;
forward-confirm-hostnames = false;
ip-cloaking = {
enabled = false;
};
ip-cloaking = { enabled = false; };
ip-limits = {
count = false;
throttle = false;
};
listeners = {
":6667" = { };
"127.0.0.1:8067" = {
websocket = true;
};
"127.0.0.1:8067" = { websocket = true; };
};
lookup-hostnames = false;
max-sendq = "1M";
name = "chat.lina.cool";
relaymsg = {
enabled = false;
};
relaymsg = { enabled = false; };
};
oper-classes = {
"chat-moderator" = {
@ -165,20 +141,15 @@
"server-admin" = {
title = "Server Admin";
extends = "chat-moderator";
capabilities = [
"rehash"
"accreg"
"chanreg"
"history"
"defcon"
"massmessage"
];
capabilities =
[ "rehash" "accreg" "chanreg" "history" "defcon" "massmessage" ];
};
};
opers = {
admin = {
class = "server-admin";
password = "$2a$04$uSnmJ2i4AVYR.z/kpCirsuNQGpFLUzsmIogK6qvc9mvf8UMDKjTPG";
password =
"$2a$04$uSnmJ2i4AVYR.z/kpCirsuNQGpFLUzsmIogK6qvc9mvf8UMDKjTPG";
};
};
};
@ -222,13 +193,11 @@
enable = true;
internalInterfaces = [ "enp1s0" ];
externalInterface = "tailscale0";
forwardPorts = [
{
destination = "100.66.105.22:25565";
proto = "tcp";
sourcePort = 25565;
}
];
forwardPorts = [{
destination = "100.66.105.22:25565";
proto = "tcp";
sourcePort = 25565;
}];
};
system.stateVersion = "23.11";