Grimmauld/grimm-nixos-laptop
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

move server module loading to modules folder

Browse source
This commit is contained in:
Grimmauld 2024-05-09 11:03:43 +02:00
parent 730195c67c
commit aa06c9b3e9
Signed by: Grimmauld
GPG key ID: C2946668769F91FB
4 changed files with 65 additions and 63 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
fake_flake.nix
View file

@ -23,19 +23,7 @@ let
grimmauld-nixos-server = [
./specific/grimmauld-nixos-server/configuration.nix
./modules/letsencrypt.nix
./modules/matrix.nix
./modules/puffer.nix
./modules/gitea.nix
./modules/grafana.nix
./modules/nextcloud.nix
./modules/prometheus.nix
# ./modules/mjolnir.nix
./modules/fail2ban.nix
./modules/email.nix
./modules/discord-matrix-bridge.nix
./modules/mastodon.nix
./modules
];
};

59
modules/default.nix Normal file
View file

@ -0,0 +1,59 @@
{
lib,
config,
inputs,
pkgs,
...
}:
let
inherit (config.networking) domain;
root_email = "contact@${domain}";
in
{
imports = [
./matrix.nix
./puffer.nix
./gitea.nix
./grafana.nix
./nextcloud.nix
./prometheus.nix
# ./mjolnir.nix
./fail2ban.nix
./email.nix
./discord-matrix-bridge.nix
./mastodon.nix
];
security.acme = {
acceptTerms = true;
defaults.email = root_email;
certs."${domain}" = {
webroot = "/var/lib/acme/acme-challenge/";
};
};
networking.firewall.allowedTCPPorts = [
80
443
];
services.nginx = {
# package = pkgs.nginxStable.override { openssl = pkgs.libressl; };
enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
virtualHosts."${domain}" = {
forceSSL = true;
enableACME = lib.mkForce false; # use the correct cert, not some weird one that matrix-synapse module supplies
useACMEHost = domain;
locations."/" = {
root = "/var/www/${domain}";
};
};
};
users.users.nginx.extraGroups = [ "acme" ];
}

22
modules/letsencrypt.nix
View file

@ -1,22 +0,0 @@
{
lib,
config,
inputs,
pkgs,
...
}:
let
inherit (config.networking) domain;
root_email = "contact@${domain}";
in
{
security.acme = {
acceptTerms = true;
defaults.email = root_email;
certs."${domain}" = {
webroot = "/var/lib/acme/acme-challenge/";
};
};
users.users.nginx.extraGroups = [ "acme" ];
}

33
specific/grimmauld-nixos-server/configuration.nix
View file

@ -11,38 +11,15 @@ in
{
imports = [ ./hardware-configuration.nix ];
boot = {
kernelPackages = pkgs.linuxPackages_latest;
};
networking.firewall.allowedTCPPorts = [
80
443
];
# boot = {
# kernelPackages = pkgs.linuxPackages_latest;
# };
networking.hostName = "grimmauld-nixos-server";
networking.domain = "grimmauld.de";
services.openssh.enable = true;
system.stateVersion = "23.11";
# networking.networkmanager.enable = lib.mkForce false;
services.nginx = {
# package = pkgs.nginxStable.override { openssl = pkgs.libressl; };
enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
virtualHosts."${domain}" = {
forceSSL = true;
enableACME = lib.mkForce false; # use the correct cert, not some weird one that matrix-synapse module supplies
useACMEHost = domain;
locations."/" = {
root = "/var/www/${domain}";
};
};
};
networking.networkmanager.enable = lib.mkForce false;
# users.users.root.openssh.authorizedKeys.keys = (import ./authorizedKeys.nix);
}