Bun/nixos-config
1
0
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Make servers headless, modularize the domain grabber

Browse source
This commit is contained in:
Bun 2025-03-23 12:44:03 -04:00
parent bbc1f4dce1
commit 88da54facd
9 changed files with 15 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

3
hosts/kitty/boot/default.nix
View file

@ -1,8 +1,7 @@
{ pkgs, ... }:
{
boot = {
kernelPackages = pkgs.linuxPackages_latest;
lanzaboote.enable = true;
kernelPackages = pkgs.linuxPackages_hardened;
plymouth.enable = true;
};
}

8
hosts/kitty/default.nix
View file

@ -1,4 +1,4 @@
{ config, lib, ... }:
{ modulesPath, ... }:
{
imports = [
./boot
@ -7,12 +7,14 @@
./hardware
./users
../../modules/system
(modulesPath + "/profiles/headless.nix")
];
networking = {
hostName = "kitty";
hostId = "8745e22e";
interfaces."eno1".ipv4.addresses = [{
address = "10.2.0.101";
address = "10.2.0.2";
prefixLength = 8;
}];
defaultGateway = {
@ -22,7 +24,7 @@
};
system = {
desktop.enable = true;
server.enable = true;
stateVersion = "24.11";
};
}

2
hosts/kitty/users/corn/default.nix
View file

@ -4,7 +4,7 @@
isNormalUser = true;
createHome = true;
openssh.authorizedKeys.keys = [
"AAAAC3NzaC1lZDI1NTE5AAAAIKaZsnlyUJDNx2oK4iHsUDb+Ok4vg1jNYEAnoHsjjM2c Chinook"
"AAAAC3NzaC1lZDI1NTE5AAAAIBCADciME1/rtWOlR2BxaAkRSgIZt61SYOgjTi6hw+yS Chinook"
"AAAAC3NzaC1lZDI1NTE5AAAAICtoHVAmq8Ps7EguBsV3VY4snagzkhH6aXqwbKzuGs2H Radiant"
];
uid = 1001;

2
hosts/kitty/users/main/default.nix
View file

@ -1,8 +1,6 @@
{ config, lib, ... }:
{
home-manager.users."${config.sysusers.main}".home = {
desktop.enable = true;
production.enable = true;
stateVersion = lib.mkForce config.system.stateVersion;
};
}

3
hosts/midas/default.nix
View file

@ -1,4 +1,4 @@
{ ... }:
{ modulesPath, ... }:
{
imports = [
./boot
@ -9,6 +9,7 @@
./services
./users
../../modules/system
(modulesPath + "/profiles/headless.nix")
];
networking = {

2
hosts/midas/firewall/default.nix
View file

@ -6,7 +6,7 @@
chain PREROUTING {
type nat hook prerouting priority dstnat; policy accept;
tcp dport 2211 dnat ip to 10.2.0.100:22 comment "SSH to Tower"
tcp dport 2222 dnat ip to 10.2.0.101:22 comment "SSH to Kitty"
tcp dport 2222 dnat ip to 10.2.0.2:22 comment "SSH to Kitty"
udp dport { 27005, 27015 } dnat ip to 10.2.0.100 comment "PC Hosted Games"

1
hosts/midas/services/default.nix
View file

@ -1,6 +1,7 @@
{ ... }:
{
services = {
cloudflare-dyndns.enable = true;
forgejo.enable = true;
icecast.enable = true;
jellyfin.enable = true;

4
hosts/prophet/default.nix
View file

@ -1,4 +1,4 @@
{ ... }:
{ modulesPath, ... }:
{
imports = [
./boot
@ -7,6 +7,7 @@
./hardware
./users
../../modules/system
(modulesPath + "/profiles/headless.nix")
];
networking = {
@ -21,6 +22,7 @@
};
services = {
cloudflare-dyndns.enable = true;
mailserver.enable = true;
nginx.enable = true;
wireguard.client.enable = true;

5
modules/system/services/server/cfdyndns/default.nix
View file

@ -1,7 +1,4 @@
{ config, pkgs, ... }:
{
services.cloudflare-dyndns = {
enable = config.system.server.enable;
apiTokenFile = "${pkgs.writeText "cloudflareapikey" config.secrets.flareApiKey}";
};
services.cloudflare-dyndns.apiTokenFile = "${pkgs.writeText "cloudflareapikey" config.secrets.flareApiKey}";
}