dotfiles.nix/nixos/viridian/configuration.nix

52 lines
1.2 KiB
Nix
Raw Normal View History

2024-08-11 16:15:30 +08:00
{...}: {
2023-10-30 19:03:16 +08:00
imports = [
2024-08-11 16:15:30 +08:00
# Global configuration for all our systems
2024-01-21 21:03:57 +08:00
../common/global
2024-08-11 16:15:30 +08:00
# Our user configuration and optional user units
2024-01-21 21:03:57 +08:00
../common/users/sajenim
2024-06-03 21:07:39 +08:00
../common/users/spectre
2024-08-11 16:15:30 +08:00
# Programs and services
./programs
2024-01-21 21:03:57 +08:00
./services
./containers
2024-08-11 16:15:30 +08:00
# Setup our hardware
2023-10-30 19:03:16 +08:00
./hardware-configuration.nix
];
2024-08-11 16:15:30 +08:00
# Networking configuration
2023-10-31 05:46:44 +08:00
networking = {
hostName = "viridian";
networkmanager.enable = true;
firewall = {
enable = true;
2024-07-16 21:27:20 +08:00
allowPing = true;
2023-10-31 05:46:44 +08:00
allowedTCPPorts = [
2024-08-08 09:02:42 +08:00
53 # adguardhome (DNS)
80 # traefik (HTTP)
443 # traefik (HTTPS)
2023-10-31 05:46:44 +08:00
32372 # qbittorrent
2024-08-08 09:02:42 +08:00
6600 # mpd
2023-10-31 05:46:44 +08:00
];
allowedUDPPorts = [
2024-08-08 09:02:42 +08:00
53 # adguardhome (DNS)
80 # traefik (HTTP)
443 # traefik (HTTPS)
2023-10-31 05:46:44 +08:00
32372 # qbittorrent
2024-08-08 09:02:42 +08:00
6600 # mpd
2023-10-31 05:46:44 +08:00
];
};
};
2023-10-30 19:03:16 +08:00
2024-08-11 16:15:30 +08:00
# Use docker instead of podman for our containers.
2024-01-21 21:03:57 +08:00
virtualisation.docker = {
enable = true;
liveRestore = false;
2023-10-30 19:03:16 +08:00
};
2024-01-23 09:49:45 +08:00
# Required for smooth remote deployments
security.sudo.wheelNeedsPassword = false;
2023-10-30 19:03:16 +08:00
# https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
system.stateVersion = "24.05";
2023-10-30 19:03:16 +08:00
}