47 lines
864 B
Nix
47 lines
864 B
Nix
{
|
|
tree,
|
|
lib,
|
|
...
|
|
}: let
|
|
inherit (lib.lists) forEach;
|
|
in {
|
|
imports = with tree;
|
|
[
|
|
presets.nixos.serverBase
|
|
presets.nixos.serverHetzner
|
|
presets.nixos.serverEncryptedDrive
|
|
|
|
#profiles.nginx
|
|
#profiles.firewallAllow.httpCommon
|
|
|
|
#profiles.chaosInternalWireGuard
|
|
|
|
./hardware.nix
|
|
./secrets.nix
|
|
]
|
|
++ (forEach [
|
|
#"social"
|
|
#"storage"
|
|
#"music"
|
|
#"quassel"
|
|
#"piped-fi"
|
|
#"mail"
|
|
] (name: ./containers + "/${name}"))
|
|
++ (with hosts.hetzner-vm.profiles; [
|
|
#vaultUI
|
|
#gitlabStaticSites
|
|
]);
|
|
|
|
# For Containers
|
|
networking.nat = {
|
|
enable = true;
|
|
internalInterfaces = ["ve-+"];
|
|
externalInterface = "enp1s0";
|
|
};
|
|
|
|
networking.hostName = "hetzner-arm";
|
|
|
|
home-manager.users.root.home.stateVersion = "23.05";
|
|
system.stateVersion = "23.05";
|
|
}
|