227 lines
7.2 KiB
Nix
227 lines
7.2 KiB
Nix
# Edit this configuration file to define what should be installed on
|
|
# your system. Help is available in the configuration.nix(5) man page, on
|
|
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
|
|
|
|
{ config, lib, pkgs, ... }:
|
|
|
|
{
|
|
imports =
|
|
[ # Include the results of the hardware scan.
|
|
./hardware-configuration.nix
|
|
];
|
|
|
|
hardware.sensor.hddtemp.enable = true;
|
|
|
|
# Use the systemd-boot EFI boot loader.
|
|
boot.loader.systemd-boot.enable = true;
|
|
boot.loader.systemd-boot.configurationLimit = 7;
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
|
|
# Set NIX_PATH to use nixpkgs deployed with krops
|
|
environment.variables.NIX_PATH = lib.mkForce "/var/src";
|
|
|
|
networking = {
|
|
hostName = "dromadaire"; # Define your hostname.
|
|
# Pick only one of the below networking options.
|
|
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
|
# networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.
|
|
interfaces.enp2s0.ipv4.addresses = [ {
|
|
address = "192.168.36.6";
|
|
prefixLength = 24;
|
|
} ];
|
|
defaultGateway = "192.168.36.1";
|
|
nameservers = [ "80.67.169.12" "80.67.169.40" "2001:910:800::12" "2001:910:800::40" ];
|
|
enableIPv6 = true;
|
|
wg-quick.interfaces = {
|
|
wg0 = {
|
|
address = [ "192.168.12.3/32" "2a01:4f9:1a:9a05::3/128" ];
|
|
dns = [ "80.67.169.12" "80.67.169.40" "2001:910:800::12" "2001:910:800::40" ];
|
|
privateKeyFile = "/etc/wireguard/private.key";
|
|
|
|
peers = [
|
|
{
|
|
publicKey = "cUmp55I20JEhxr+RMmOsX+6U9kcDiAq3grnvzjQ642w=";
|
|
allowedIPs = [ "0.0.0.0/0" "::/0" ];
|
|
endpoint = "vpn.lab12.fr:51812";
|
|
persistentKeepalive = 15;
|
|
}
|
|
];
|
|
};
|
|
};
|
|
};
|
|
|
|
# Set your time zone.
|
|
time.timeZone = "Europe/Paris";
|
|
|
|
# Configure network proxy if necessary
|
|
# networking.proxy.default = "http://user:password@proxy:port/";
|
|
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
|
|
|
# Select internationalisation properties.
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
console = {
|
|
font = "Lat2-Terminus16";
|
|
keyMap = "fr";
|
|
#useXkbConfig = true; # use xkb.options in tty.
|
|
};
|
|
|
|
# Enable the X11 windowing system.
|
|
# services.xserver.enable = true;
|
|
|
|
|
|
|
|
|
|
# Configure keymap in X11
|
|
# services.xserver.xkb.layout = "us";
|
|
# services.xserver.xkb.options = "eurosign:e,caps:escape";
|
|
|
|
# Enable CUPS to print documents.
|
|
# services.printing.enable = true;
|
|
|
|
# Enable sound.
|
|
# hardware.pulseaudio.enable = true;
|
|
# OR
|
|
# services.pipewire = {
|
|
# enable = true;
|
|
# pulse.enable = true;
|
|
# };
|
|
|
|
# Enable touchpad support (enabled default in most desktopManager).
|
|
# services.libinput.enable = true;
|
|
|
|
# Define a user account. Don't forget to set a password with 'passwd'.
|
|
users.users.optisseur = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" ]; # Enable 'sudo' for the user.
|
|
initialPassword = "Change Me!";
|
|
# packages = with pkgs; [
|
|
# firefox
|
|
# tree
|
|
# ];
|
|
};
|
|
|
|
environment.shellAliases = {
|
|
tm = "tmux new -A -s shared" ;
|
|
ll = "ls -al";
|
|
};
|
|
|
|
|
|
# List packages installed in system profile. To search, run:
|
|
# $ nix search wget
|
|
environment.systemPackages = with pkgs; [
|
|
git
|
|
wget
|
|
tmux
|
|
htop
|
|
memtester
|
|
# Useful podman development tools
|
|
#dive # look into docker image layers
|
|
podman-tui # status of containers in the terminal
|
|
#aardvark-dns
|
|
#docker-compose # start group of containers for dev
|
|
#podman-compose # start group of containers for dev
|
|
];
|
|
|
|
|
|
# Some programs need SUID wrappers, can be configured further or are
|
|
# started in user sessions.
|
|
|
|
programs.neovim = {
|
|
enable = true;
|
|
viAlias = true;
|
|
vimAlias = true;
|
|
};
|
|
|
|
# programs.mtr.enable = true;
|
|
# programs.gnupg.agent = {
|
|
# enable = true;
|
|
# enableSSHSupport = true;
|
|
# };
|
|
|
|
# List services that you want to enable:
|
|
|
|
# Enable the OpenSSH daemon.
|
|
services.openssh.enable = true;
|
|
services.openssh.ports = [ 144 ];
|
|
services.openssh.settings = {
|
|
PermitRootLogin = "no";
|
|
PasswordAuthentication = false;
|
|
KbdInteractiveAuthentication = false;
|
|
};
|
|
|
|
virtualisation.containers.enable = true;
|
|
virtualisation.podman = {
|
|
enable = true;
|
|
|
|
# Create a `docker` alias for podman, to use it as a drop-in replacement
|
|
dockerCompat = true;
|
|
|
|
# Required for containers under podman-compose to be able to talk to each other.
|
|
defaultNetwork.settings.dns_enabled = true;
|
|
};
|
|
#virtualisation.oci-containers.containers = {
|
|
# nixos = {
|
|
# image = "nix:latest"
|
|
# extraOptions = [ "--network=host" ];
|
|
# };
|
|
#};
|
|
|
|
|
|
services.gitea-actions-runner = {
|
|
package = pkgs.forgejo-runner;
|
|
instances.default = {
|
|
enable = false;
|
|
name = "dromadaire";
|
|
url = "https://git.distrilab.fr";
|
|
# Obtaining the path to the runner token file may differ
|
|
tokenFile = "/etc/forgejo/runner.token";
|
|
labels = [
|
|
# provide a debian base with nodejs for actions
|
|
"debian-latest:docker://node:20-bookworm"
|
|
# fake the ubuntu name, because node provides no ubuntu builds
|
|
"ubuntu-latest:docker://node:20-bookworm"
|
|
# nixos
|
|
"nixos:docker://nixos/nix:latest"
|
|
# provide native execution on the host
|
|
#"native:host"
|
|
];
|
|
};
|
|
};
|
|
|
|
# Open ports in the firewall.
|
|
networking.firewall.allowedTCPPorts = [ 80 144 443 ];
|
|
networking.firewall.interfaces.podman0.allowedUDPPorts = [ 53 ];
|
|
networking.firewall.interfaces.podman1.allowedUDPPorts = [ 53 ];
|
|
networking.firewall.interfaces.podman2.allowedUDPPorts = [ 53 ];
|
|
networking.firewall.interfaces.podman3.allowedUDPPorts = [ 53 ];
|
|
networking.firewall.interfaces.podman4.allowedUDPPorts = [ 53 ];
|
|
# networking.firewall.allowedUDPPorts = [ ... ];
|
|
# Or disable the firewall altogether.
|
|
# networking.firewall.enable = false;
|
|
|
|
# Copy the NixOS configuration file and link it from the resulting system
|
|
# (/run/current-system/configuration.nix). This is useful in case you
|
|
# accidentally delete configuration.nix.
|
|
# system.copySystemConfiguration = true;
|
|
|
|
# This option defines the first version of NixOS you have installed on this particular machine,
|
|
# and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
|
|
#
|
|
# Most users should NEVER change this value after the initial install, for any reason,
|
|
# even if you've upgraded your system to a new NixOS release.
|
|
#
|
|
# This value does NOT affect the Nixpkgs version your packages and OS are pulled from,
|
|
# so changing it will NOT upgrade your system - see https://nixos.org/manual/nixos/stable/#sec-upgrading for how
|
|
# to actually do that.
|
|
#
|
|
# This value being lower than the current NixOS release does NOT mean your system is
|
|
# out of date, out of support, or vulnerable.
|
|
#
|
|
# Do NOT change this value unless you have manually inspected all the changes it would make to your configuration,
|
|
# and migrated your data accordingly.
|
|
#
|
|
# For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
|
|
system.stateVersion = "24.05"; # Did you read the comment?
|
|
|
|
}
|
|
|