Fresh repo without sensitive data.

machines/Ophanim/Ophanim.nix

@@ -0,0 +1,29 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ config, pkgs, ... }:
+
+{
+  imports = [
+      ./hardware-configuration.nix
+    ];
+
+  system.autoUpgrade.enable = false;
+
+#    services.vsftp = {
+#      enable = true;
+#      ssl_sslv3 = true;
+#      forceLocalDataSSL = true;
+#      writeEnable = false;
+#      userlist = [];
+#    };
+  services.haveged.enable = true;
+
+  # This value determines the NixOS release with which your system is to be
+  # compatible, in order to avoid breaking some software such as database
+  # servers. You should change this only after NixOS release notes say you
+  # should.
+  system.stateVersion = "18.09";
+
+}

machines/Ophanim/configuration.nix

@@ -0,0 +1,27 @@
+{
+  confPath = ./Ophanim.nix;
+  pkgs = [
+    "base"
+    "emacs"
+    "server"
+  ];
+  services = [
+    ../../services/gitea.nix
+    ../../services/hydra.nix
+    ../../services/mailserver.nix
+    ../../services/mariaDB.nix
+    ../../services/nginx.nix
+    ../../services/openssh.nix
+  ];
+  conf = {
+    allowUnfree = true;
+    networking = {
+      hostName = "Ophanim";
+      firewall = {
+        allowPing = false;
+        allowedUDPPorts = [ 22 80 443 ];
+        allowedTCPPorts = [ 80 443 5222 5269 ];
+      };
+    };
+  };
+}

machines/Ophanim/hardware-configuration.nix

@@ -0,0 +1,28 @@
+{ config, lib, pkgs, ... }:
+
+{
+  imports =
+    [ <nixpkgs/nixos/modules/profiles/qemu-guest.nix>
+    ];
+
+  boot = {
+    initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "sd_mod" "sr_mod" ];
+    kernelPackages = pkgs.linuxPackages_latest;
+    kernelModules = [ ];
+    extraModulePackages = [ ];
+    loader.grub = {
+      enable = true;
+      version = 2;
+      device = "/dev/sda"; # or "nodev" for efi only
+    };
+  };
+
+  time.timeZone = "Europe/Berlin";
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/fa0c2ff3-59f9-4c00-8153-c2c2ef0f0e84";
+      fsType = "ext4";
+    };
+
+  swapDevices = [ ];
+}