Added domain option. Maybe fixed binary cache signing.

machines/CDServer/configuration.nix

@@ -0,0 +1,21 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ config, pkgs, ... }:
+
+{
+  imports = [
+      ./hardware-configuration.nix
+    ];
+
+  system.autoUpgrade.enable = false;
+  services.haveged.enable = true;
+
+  # This value determines the NixOS release with which your system is to be
+  # compatible, in order to avoid breaking some software such as database
+  # servers. You should change this only after NixOS release notes say you
+  # should.
+  system.stateVersion = "19.03";
+
+}

machines/CDServer/options.nix

@@ -0,0 +1,41 @@
+{ config, lib, ... }:
+
+with lib;
+
+{
+  imports = [ 
+    ../../options/machine.nix 
+  ];
+
+  config.machine = {
+    hostName = "CDServer";
+    allowUnfree = true;
+    conffiles = [
+      "etcvars"
+#      "security"
+      "zsh"
+    ];
+    pkgs = [
+      "base"
+      "emacs"
+      "server"
+    ];
+    services = [
+      "docker"
+#      "fail2ban"
+#      "gitea"
+#      "mailserver"
+      "cd-internes"
+      "mariaDB"
+      "nginx"
+      "openssh"
+    ];
+    firewall = {
+      allowPing = false;
+      allowedUDPPorts = [ 22 80 443 ];
+      allowedTCPPorts = [ 80 443 ];
+      allowedUDPPortRanges = [];
+      allowedTCPPortRanges = [];
+    };
+  };
+}