47 lines
833 B
Nix
47 lines
833 B
Nix
{
|
|
tree,
|
|
lib,
|
|
...
|
|
}: let
|
|
inherit (lib.lists) forEach;
|
|
in {
|
|
imports = with tree;
|
|
[
|
|
presets.nixos.serverBase
|
|
presets.nixos.serverHetzner
|
|
|
|
profiles.nginx
|
|
profiles.firewallAllow.httpCommon
|
|
|
|
profiles.cross.arm64
|
|
profiles.chaosInternalWireGuard
|
|
|
|
./hardware.nix
|
|
./secrets.nix
|
|
]
|
|
++ (forEach [
|
|
"social"
|
|
"storage"
|
|
"music"
|
|
"quassel"
|
|
"piped"
|
|
"mail"
|
|
] (name: ./containers + "/${name}"))
|
|
++ (with hosts.hetzner-vm.profiles; [
|
|
vaultUI
|
|
gitlabStaticSites
|
|
]);
|
|
|
|
# For Containers
|
|
networking.nat = {
|
|
enable = true;
|
|
internalInterfaces = ["ve-+"];
|
|
externalInterface = "eth0";
|
|
};
|
|
|
|
networking.hostName = "hetzner-vm";
|
|
|
|
home-manager.users.root.home.stateVersion = "23.05";
|
|
system.stateVersion = "23.05";
|
|
}
|