Cloonar/nixos
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

add web-01 host

Browse source
This commit is contained in:
Dominik Polakovics Polakovics 2023-08-16 22:31:22 +02:00
parent 0e1cd46b45
commit 2c175a324b
22 changed files with 1045 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

60
hosts/web-01.cloonar.com/configuration.nix Normal file
View file

@ -0,0 +1,60 @@
{ ... }: {
imports = [
./utils/bento.nix
./utils/modules/sops.nix
./utils/modules/lego/lego.nix
./utils/modules/mysql.nix
./utils/modules/nginx.nix
./utils/modules/bitwarden/default.nix
./utils/modules/zammad/default.nix
# ./utils/modules/autoupgrade.nix
./utils/modules/borgbackup.nix
./utils/modules/netdata.nix
./hardware-configuration.nix
./utils/modules/services/web/typo3.nix
./utils/modules/services/web/stack.nix
./sites/autoconfig.cloonar.com.nix
./sites/api.optiprot.eu.nix
./sites/cloonar.com.nix
./sites/gbv-aktuell.at.nix
./sites/matomo.cloonar.com.nix
./sites/optiprot.eu.nix
./sites/api.optiprot.cloonar.dev.nix
./sites/cloonar.dev.nix
./sites/diabetes-austria.cloonar.dev.nix
./sites/paraclub.cloonar.dev.nix
./sites/gbv.cloonar.dev.nix
./sites/gbv-aktuell.cloonar.dev.nix
./sites/optiprot.cloonar.dev.nix
./sites/mehr-leistbaren-wohnraum-schaffen.at.nix
./sites/mehr-leistbaren-wohnraum-schaffen.cloonar.dev.nix
];
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
sops.defaultSopsFile = ./secrets.yaml;
nix.gc.options = "--delete-older-than 60d";
boot.cleanTmpDir = true;
zramSwap.enable = true;
networking.hostName = "web-01";
services.openssh.enable = true;
users.users.root.openssh.authorizedKeys.keys = [
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN/2SAFm50kraB1fepAizox/QRXxB7WbqVbH+5OPalDT47VIJGNKOKhixQoqhABHxEoLxdf/C83wxlCVlPV9poLfDgVkA3Lyt5r3tSFQ6QjjOJAgchWamMsxxyGBedhKvhiEzcr/Lxytnoz3kjDG8fqQJwEpdqMmJoMUfyL2Rqp16u+FQ7d5aJtwO8EUqovhMaNO7rggjPpV/uMOg+tBxxmscliN7DLuP4EMTA/FwXVzcFNbOx3K9BdpMRAaSJt4SWcJO2cS2KHA5n/H+PQI7nz5KN3Yr/upJN5fROhi/SHvK39QOx12Pv7FCuWlc+oR68vLaoCKYhnkl3DnCfc7A7"
];
# backups
borgbackup.repo = "u149513-sub5@u149513-sub5.your-backup.de:borg";
networking.firewall = {
enable = true;
allowedTCPPorts = [ 22 80 443 ];
};
system.stateVersion = "22.05";
}