v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Projects Releases Packages Activity Actions

Merge branch 'main' of ssh://git.0x76.dev:42/v/infrastructure
Some checks failed
Lint / lint (push) Failing after 1m38s
Details
Plex Update / update (push) Successful in 1m51s
Details

Browse source
This commit is contained in:
Vivian 2023-12-24 10:52:41 +01:00
commit 1c0c9f0b2c
1 changed files with 18 additions and 28 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

46
nixos/hosts/hades/lucy/configuration.nix
View file

@ -1,6 +1,6 @@
# Edit this configuration file to define what should be installed on # Edit this configuration file to define what should be installed on
# your system. Help is available in the configuration.nix(5) man page # your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’). # and in the NixOS manual (accessible by running `nixos-help`).
{ pkgs, ... }: { pkgs, ... }:
let let
@ -24,29 +24,19 @@ let
doCheck = false; doCheck = false;
}; };
in in {
{
imports = [ ./hardware-configuration.nix ]; imports = [ ./hardware-configuration.nix ];
# This value determines the NixOS release from which the default # This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions # settings for stateful data, like file locations and database versions
# on your system were taken. It‘s perfectly fine and recommended to leave # on your system were taken. It's perfectly fine and recommended to leave
# this value at the release version of the first install of this system. # this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option # Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html). # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
system.stateVersion = "23.05"; # Did you read the comment? system.stateVersion = "23.05"; # Did you read the comment?
# Additional packages # Additional packages
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [ jq wget jre8 ];
ffuf
gcc
go
jq
nuclei-latest
rustup
trivy
wapiti
];
boot.loader = { boot.loader = {
systemd-boot.enable = true; systemd-boot.enable = true;
@ -54,22 +44,22 @@ in
efi.efiSysMountPoint = "/boot"; efi.efiSysMountPoint = "/boot";
}; };
virtualisation.docker.enable = true;
services.mosquitto = {
enable = true;
listeners = [{
acl = [ "pattern readwrite #" ];
omitPasswordAuth = true;
settings.allow_anonymous = true;
}];
};
networking.firewall = { networking.firewall = {
enable = true; enable = true;
allowedTCPPorts = [ 1883 ]; allowedTCPPorts = [ 25565 ];
}; };
users.extraUsers.laura.extraGroups = [ "wheel" "docker" ]; users.extraUsers.laura.extraGroups = [ "wheel" ];
users.extraUsers.vivian.extraGroups = [ "docker" ]; users.groups.mc = { };
users.extraUsers.julia = {
isNormalUser = true;
shell = pkgs.zsh;
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKTvqk+CJG4VwN8wg3H1ZdbUVj1JuX7RYKH1ewRKfCPv julia@juliadijkstraarch"
];
extraGroups = [ "mc" "wheel" ];
};
} }