jonas/.hive
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

System Gen182 @ 2025-05-02-23:48:15 by jonas@comfy-station

Browse Source
This commit is contained in:
Jonas Röger
2025-05-02 23:48:16 +02:00
parent 87db9887c2
commit 7add5e0db6
23 changed files with 302 additions and 247 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
hosts/harbor/configuration.nix
View File

@@ -5,9 +5,6 @@
}: {
imports = [
./hardware-configuration.nix
../../modules/networking/wireguard
../../modules/services/borg-server.nix
../../modules/services/nextcloud-instance.nix
];
# Secret management
@@ -35,6 +32,7 @@
};
};
# user with ssh access
users.users.jonas = {
isNormalUser = true;
description = "Jonas";
@@ -44,28 +42,22 @@
];
};
users.defaultUserShell = pkgs.zsh;
programs.zsh.enable = true;
services.openssh = {
enable = true;
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
};
services.nextcloud-instance.enable = true;
services.nextcloud-instance.ssl = true;
services.nextcloud-instance.adminPasswordFile = config.sops.secrets.nextcloud-admin-pass.path;
services.nextcloud-instance.instanceFQDN = "nextcloud.jroeger.de";
services.borg-server.enable = true;
services.borg-server.repositories.comfy-station.ssh_public_key = builtins.readFile (../../static/keys + "/borg-jonas@comfy-station.pub");
networking.wg.server.enable = true;
networking.wg.server.privateKeyFile = config.sops.secrets.wg-priv.path;
# Allow unfree packages
nixpkgs.config.allowUnfree = true;
# hive modules
hive.nextcloud-instance.enable = true;
hive.nextcloud-instance.ssl = true;
hive.nextcloud-instance.adminPasswordFile = config.sops.secrets.nextcloud-admin-pass.path;
hive.nextcloud-instance.instanceFQDN = "nextcloud.jroeger.de";
hive.borg-server.enable = true;
hive.borg-server.repositories.comfy-station.ssh_public_key = builtins.readFile (../../static/keys + "/borg-jonas@comfy-station.pub");
hive.wg.server.enable = true;
hive.wg.server.privateKeyFile = config.sops.secrets.wg-priv.path;
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions