.github
.vscode
docs
hydra
keys
lib
modules
systems
artemision
bob
jeeves
jeeves-jr
docker
configuration.nix
default.nix
hardware.nix
secrets.yaml
palatine-hill
rhapsody-in-green
users
.envrc
.gitconfig
.gitignore
.sops.yaml
checks.nix
flake.lock
flake.nix
shell.nix
sops-mergetool.sh
statix.toml
treefmt.toml
66 lines
1.1 KiB
Nix
66 lines
1.1 KiB
Nix
{ pkgs, ... }:
|
|
{
|
|
imports = [
|
|
../../users/richie/global/ssh.nix
|
|
../../users/richie/global/zerotier.nix
|
|
./docker
|
|
];
|
|
|
|
networking = {
|
|
hostId = "1beb3026";
|
|
firewall.enable = false;
|
|
};
|
|
|
|
boot = {
|
|
zfs.extraPools = [ "Main" ];
|
|
filesystem = "zfs";
|
|
useSystemdBoot = true;
|
|
};
|
|
|
|
environment = {
|
|
systemPackages = with pkgs; [ docker-compose ];
|
|
etc = {
|
|
# Creates /etc/lynis/custom.prf
|
|
"lynis/custom.prf" = {
|
|
text = ''
|
|
skip-test=BANN-7126
|
|
skip-test=BANN-7130
|
|
skip-test=DEB-0520
|
|
skip-test=DEB-0810
|
|
skip-test=FIRE-4513
|
|
skip-test=HRDN-7222
|
|
skip-test=KRNL-5820
|
|
skip-test=LOGG-2190
|
|
skip-test=LYNIS
|
|
skip-test=TOOL-5002
|
|
'';
|
|
mode = "0440";
|
|
};
|
|
};
|
|
};
|
|
|
|
services = {
|
|
nfs.server.enable = true;
|
|
|
|
openssh.ports = [ 352 ];
|
|
|
|
smartd.enable = true;
|
|
|
|
sysstat.enable = true;
|
|
|
|
usbguard = {
|
|
enable = true;
|
|
rules = ''
|
|
allow id 1532:0241
|
|
'';
|
|
};
|
|
|
|
zfs = {
|
|
trim.enable = true;
|
|
autoScrub.enable = true;
|
|
};
|
|
};
|
|
|
|
system.stateVersion = "23.05";
|
|
}
|