43 lines
910 B
Nix
43 lines
910 B
Nix
|
{
|
||
|
|
tree,
|
||
|
|
inputs,
|
||
|
|
...
|
||
|
|
}: {
|
||
|
|
imports =
|
||
|
|
(with tree; [
|
||
|
|
profiles.base
|
||
|
|
users.root
|
||
|
|
|
||
|
|
modules.nixos.rclone-serve
|
||
|
|
modules.nixos.rclone-sync
|
||
|
|
modules.nixos.secrets
|
||
|
|
modules.nixos.cockroachdb-bin
|
||
|
|
])
|
||
|
|
++ [
|
||
|
|
# Default modules which are usually included in nixos.nix
|
||
|
|
inputs.home-manager-unstable.nixosModules.home-manager
|
||
|
|
inputs.vaultui.nixosModules.default
|
||
|
|
inputs.gitlab_artifacts_sync.nixosModules.default
|
||
|
|
inputs.piped-flake.nixosModules.default
|
||
|
|
];
|
||
|
|
|
||
|
|
home-manager.users.root = {
|
||
|
|
imports = with tree; [home.base home.dev.small];
|
||
|
|
};
|
||
|
|
|
||
|
|
networking.firewall = {
|
||
|
|
enable = true;
|
||
|
|
allowPing = true;
|
||
|
|
checkReversePath = "loose";
|
||
|
|
};
|
||
|
|
|
||
|
|
# TODO: Better DNS setup
|
||
|
|
services.resolved.enable = false;
|
||
|
|
environment.etc."resolv.conf".text = ''
|
||
|
|
nameserver 8.8.8.8
|
||
|
|
nameserver 8.8.4.4
|
||
|
|
'';
|
||
|
|
|
||
|
|
time.timeZone = "Europe/London";
|
||
|
|
}
|