nixos-config/config/default.nix

48 lines
1 KiB
Nix
Raw Normal View History

2022-01-15 09:55:15 +00:00
{ config, pkgs, ... }: {
2022-01-14 09:19:01 +00:00
imports = [
./zfs.nix
./users/darkkirb.nix
2022-01-14 13:03:14 +00:00
./nix.nix
2022-01-14 14:13:55 +00:00
./sops.nix
2022-01-14 14:38:01 +00:00
./wireguard.nix
2022-01-15 11:08:46 +00:00
./services/loki.nix
2022-01-15 15:09:02 +00:00
./home.nix
2022-01-15 17:11:38 +00:00
./services/restic.nix
./services/nix-cache-upload.nix
2022-01-14 09:19:01 +00:00
];
services.openssh.enable = true;
environment.systemPackages = [ pkgs.git ];
2022-01-14 10:30:44 +00:00
networking.firewall.allowedTCPPorts = [ 22 ];
2022-01-15 09:55:15 +00:00
2022-01-15 15:09:02 +00:00
users.defaultUserShell = pkgs.zsh;
2022-01-15 09:55:15 +00:00
# Prometheus node exporter
services.prometheus.exporters.node = {
enable = true;
enabledCollectors = [
"interrupts"
"lnstat"
"mountstats"
"network_route"
"ntp"
"processes"
"systemd"
"tcpstat"
];
listenAddress = (import ../utils/getInternalIP.nix config).listenIP;
};
2022-01-19 19:24:50 +00:00
networking.firewall.interfaces."wg0".allowedTCPPorts = [ config.services.prometheus.exporters.node.port ];
2022-01-15 11:57:44 +00:00
nix.buildCores = 0;
2022-01-15 15:09:02 +00:00
environment.pathsToLink = [ "/share/zsh" ];
2022-01-18 10:59:26 +00:00
console.keyMap = "neo";
2022-01-18 13:38:04 +00:00
programs.gnupg.agent.enable = true;
security.sudo.extraConfig = ''
Defaults env_keep += "TMUX"
'';
2022-01-14 09:19:01 +00:00
}