configs/server.nix

   1 { config, pkgs, ... }:
   2
   3 {
   4   networking.dhcpcd.enable = false;
   5   systemd.network = {
   6     enable = true;
   7     networks."10-lan" = {
   8       matchConfig.Name = "*";
   9       DHCP = "yes";
  10       linkConfig.RequiredForOnline = "routable";
  11     };
  12   };
  13
  14   time.timeZone = "Europe/Zagreb";
  15
  16   i18n.defaultLocale = "en_US.UTF-8";
  17
  18   i18n.extraLocaleSettings = {
  19     LC_ADDRESS = "hr_HR.UTF-8";
  20     LC_IDENTIFICATION = "hr_HR.UTF-8";
  21     LC_MEASUREMENT = "hr_HR.UTF-8";
  22     LC_MONETARY = "hr_HR.UTF-8";
  23     LC_NAME = "hr_HR.UTF-8";
  24     LC_NUMERIC = "hr_HR.UTF-8";
  25     LC_PAPER = "hr_HR.UTF-8";
  26     LC_TELEPHONE = "hr_HR.UTF-8";
  27     LC_TIME = "hr_HR.UTF-8";
  28   };
  29
  30   console = {
  31     keyMap = "dvorak";
  32     packages = with pkgs; [ terminus_font ];
  33     font = "ter-124b";
  34   };
  35
  36   sound.enable = false;
  37
  38   programs.zsh = {
  39     enable = true;
  40     autosuggestions.enable = true;
  41     syntaxHighlighting.enable = true;
  42   };
  43
  44   users.users.duje = {
  45     uid = 1000;
  46     isNormalUser = true;
  47     description = "Duje";
  48     extraGroups = [ "networkmanager" "wheel" "libvirtd" ];
  49     openssh.authorizedKeys.keys =
  50       [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIMI2evf5v4ghSCJWacQJGMINjYW48WZYLvL6KIob1rd"
  51         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKeuxm8MnRjkVnrE+lZjlI+MuqzvD78OmvSgd43UMJ6b" ];
  52     shell = pkgs.zsh;
  53   };
  54   users.users.root.openssh.authorizedKeys.keys =
  55     [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIMI2evf5v4ghSCJWacQJGMINjYW48WZYLvL6KIob1rd"
  56       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKeuxm8MnRjkVnrE+lZjlI+MuqzvD78OmvSgd43UMJ6b" ];
  57
  58   nixpkgs.config.allowUnfree = true;
  59
  60   environment.systemPackages = with pkgs; [
  61     neovim
  62     lm_sensors
  63     htop
  64     nvimpager
  65     tree
  66     neofetch
  67   ];
  68
  69   hardware.sensor.hddtemp = {
  70     enable = true;
  71     drives = [ "/dev/disk/by-path/*" ];
  72   };
  73
  74   virtualisation.libvirtd.enable = true;
  75
  76   services.openssh.enable = true;
  77
  78   services.smartd.enable = true;
  79   programs.msmtp = {
  80     enable = true;
  81     defaults = {
  82       auth = true;
  83       tls = true;
  84       tls_starttls = true;
  85       aliases = "/etc/aliases";
  86     };
  87     accounts = {
  88       default = {
  89         from = "duje.mihanovic@skole.hr";
  90         host = "smtp.skole.hr";
  91         port = 587;
  92         user = "duje.mihanovic";
  93         passwordeval = "/run/current-system/sw/bin/cat /secrets/email.txt";
  94       };
  95     };
  96   };
  97
  98   environment.etc."aliases" = {
  99     text = ''
 100       root: duje.mihanovic@skole.hr
 101       duje: duje.mihanovic@skole.hr
 102       mailer-daemon: duje.mihanovic@skole.hr
 103     '';
 104     mode = "0644";
 105   };
 106
 107   # Open ports in the firewall.
 108   # networking.firewall.allowedTCPPorts = [ ... ];
 109   # networking.firewall.allowedUDPPorts = [ ... ];
 110   # Or disable the firewall altogether.
 111   # networking.firewall.enable = false;
 112
 113   system.stateVersion = "23.05";
 114
 115 }