hosts/by-name/server2/configuration.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

{config, ...}: {
  imports = [
    ./networking.nix # network configuration that just works
    ./hardware.nix
  ];

  vhack = {
    back = {
      enable = true;
      repositories = {
        "${config.services.gitolite.dataDir}/repositories/vhack.eu/nixos-server.git" = {
          domain = "issues.foss-syndicate.org";
          port = 9220;
        };
      };
    };
    fail2ban.enable = true;
    git-server = {
      enable = true;
      domain = "git.foss-syndicate.org";
      gitolite.adminPubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIME4ZVa+IoZf6T3U08JG93i6QIAJ4amm7mkBzO14JSkz cardno:000F_18F83532";
    };
    nginx = {
      enable = true;
      redirects = {
        "source.foss-syndicate.org" = "https://git.foss-syndicate.org/vhack.eu/nixos-server";
      };
    };
    openssh.enable = true;
    persist = {
      enable = true;
      directories = [
        "/var/log"
      ];
    };
    rust-motd.enable = true;
    users.enable = true;
  };

  boot.tmp.cleanOnBoot = true;
  zramSwap.enable = true;
  networking.hostName = "server2";
  networking.domain = "vhack.eu";

  system.stateVersion = "24.11";
}