emmatherockandClaude Sonnet 5
5a4b51112f
Introduce myHomeProfile.extraPrograms (mirrors myPackages.extra) so each host's NixOS config declares which extra Home Manager modules it needs on top of a shared core (fish, starship, btop, git). miku-homelab's former home.nix becomes its extras list; vps gets home-manager for the first time using core alone. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
72 lines
1.9 KiB
Nix
72 lines
1.9 KiB
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
../../modules/profiles/server.nix
|
|
../../modules/system/home-profile.nix
|
|
../../modules/system/packages.nix
|
|
];
|
|
|
|
age.secrets.vps-wg.file = ../../secrets/vps-wg.age;
|
|
|
|
myNetworking = {
|
|
hostName = "vps";
|
|
useNetworkManager = false;
|
|
staticIp = {
|
|
interface = "eth0";
|
|
address = "23.175.41.196";
|
|
prefixLength = 27;
|
|
gateway = "23.175.41.225";
|
|
nameservers = [ "1.1.1.1" "1.0.0.1" ];
|
|
};
|
|
extraTcpPorts = [ 80 443 ];
|
|
extraUdpPorts = [ 51822 ];
|
|
sshAllowUsers = [ "emmatherock" ];
|
|
wireguard = {
|
|
enable = true;
|
|
ips = [ "10.20.0.1/24" ];
|
|
privateKeyFile = config.age.secrets.vps-wg.path;
|
|
listenPort = 51822;
|
|
peers = [
|
|
{
|
|
publicKey = "bqxDHQNxOSFpTo3We9ujC2WljtaRBgiNEewW+Rlu10k=";
|
|
allowedIPs = [ "10.20.0.2/32" ];
|
|
}
|
|
];
|
|
};
|
|
};
|
|
|
|
myUsers = {
|
|
admins.emmatherock = {
|
|
description = "EmmaTheRock";
|
|
shell = pkgs.fish;
|
|
extraGroups = [ "wheel" ];
|
|
authorizedKeys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA8vfwM5g9RJXqHtqTgNqsYg9SxSm+UMvFqTjBoAsLJ6 emmatherock@MAIN-PC"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIpTslcK0yQ6k+h8foNl17wVRyJUfEGzq7f1h3014WNB s21 plus"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEUCpjAuJobymPPAoPjLdL1eD6g4v6wrquu3cyHP22Wj emmatherock@NixOS"
|
|
];
|
|
};
|
|
};
|
|
|
|
myContainers = {
|
|
enable = true;
|
|
composeStacks.core = {
|
|
path = "/opt/containers/core";
|
|
after = [ "network-online.target" ];
|
|
};
|
|
};
|
|
|
|
boot.loader.systemd-boot.enable = true;
|
|
boot.loader.systemd-boot.configurationLimit = 10;
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
|
|
time.timeZone = "America/Argentina/Buenos_Aires";
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
|
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
|
|
|
system.stateVersion = "26.05";
|
|
}
|