43 lines
682 B
Nix
43 lines
682 B
Nix
|
{ config, lib, ... }:
|
||
|
|
|
||
|
|
with lib;
|
||
|
|
|
||
|
|
{
|
||
|
|
imports = [
|
||
|
|
../../options/machine.nix
|
||
|
|
];
|
||
|
|
|
||
|
|
config.machine = {
|
||
|
|
hostName = "Ophanim";
|
||
|
|
domain = "ophanim.de";
|
||
|
|
allowUnfree = true;
|
||
|
|
conffiles = [
|
||
|
|
"etcvars"
|
||
|
|
"security"
|
||
|
|
"zsh"
|
||
|
|
];
|
||
|
|
pkgs = [
|
||
|
|
"base"
|
||
|
|
"emacs"
|
||
|
|
"server"
|
||
|
|
];
|
||
|
|
services = [
|
||
|
|
"fail2ban"
|
||
|
|
"gitea"
|
||
|
|
"hydra"
|
||
|
|
"mailserver"
|
||
|
|
"mariaDB"
|
||
|
|
"nextcloud"
|
||
|
|
"nginx"
|
||
|
|
"openssh"
|
||
|
|
];
|
||
|
|
firewall = {
|
||
|
|
allowPing = false;
|
||
|
|
allowedUDPPorts = [ 22 80 443 ];
|
||
|
|
allowedTCPPorts = [ 80 443 ]; # 5222 5269 ];
|
||
|
|
allowedUDPPortRanges = [];
|
||
|
|
allowedTCPPortRanges = [];
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|