oqyude/nixos
1
0
Fork 0
mirror of https://github.com/oqyude/nixos.git synced 2026-06-11 04:30:41 +03:00
Code Issues Packages Projects Releases Wiki Activity

Init

Browse Source
This commit is contained in:
Jor Oqyude
2025-05-15 21:11:30 +03:00
commit b6cee5e832
43 changed files with 2652 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
devices/server.nix
+274
View File
@@ -0,0 +1,274 @@
{ inputs, ... }@flakeContext:
let
nixosModule =
{
config,
lib,
pkgs,
...
}:
{
imports = with inputs; [
./hardware/server.nix
self.nixosModules.default
self.homeConfigurations.server.nixosModule # home-manager configuration module
];
boot = {
kernelPackages = pkgs.linuxPackages_xanmod_stable;
hardwareScan = true;
loader = {
systemd-boot.enable = lib.mkDefault true;
efi.canTouchEfiVariables = lib.mkDefault true;
};
};
hardware = {
bluetooth.enable = false;
};
#swapDevices =
# [ { device = "/dev/disk/by-partlabel/disk-main-swap"; }
# ];
users = {
users = {
"${inputs.zeroq.devices.admin}" = {
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKduJia+unaQQdN6X5syaHvnpIutO+yZwvfiCP4qKQ/P root@sapphira"
];
};
};
};
fileSystems = {
# External drive
"${inputs.zeroq.dirs.server-home}" = {
device = "/dev/disk/by-uuid/37e53ebc-5343-a94d-9fe2-0ca39e13a8de";
fsType = "ext4";
options = [
"nofail"
"x-systemd.device-timeout=0"
];
};
};
services = {
nextcloud = {
enable = false;
package = pkgs.nextcloud30;
hostName = "localhost:10000";
database.createLocally = true;
config = {
dbtype = "mysql";
dbuser = "nextcloud";
#dbhost = "/run/postgresql";
dbname = "nextcloud";
adminuser = "root";
#adminpassFile = "${inputs.zeroq.dirs.credentials-target}/nextcloud/admin-pass.txt";
};
settings = {
appstoreEnable = false;
log_type = "file";
trusted_domains = [
"100.64.0.0"
"192.168.1.18"
"localhost"
];
};
extraAppsEnable = true;
extraApps = {
inherit (pkgs.nextcloud30Packages.apps)
bookmarks
calendar
contacts
cookbook
cospend
deck
end_to_end_encryption
forms
gpoddersync
groupfolders
impersonate
integration_paperless
mail
maps
memories
music
notes
notify_push
onlyoffice
polls
previewgenerator
richdocuments
spreed
tasks
user_oidc
user_saml
whiteboard
;
};
};
earlyoom.enable = true;
preload.enable = true;
auto-cpufreq.enable = true;
throttled.enable = true;
nginx = {
enable = false;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts = {
"localhost:10000" = {
forceSSL = false;
enableACME = false;
listen = [
{
addr = "100.64.0.0";
port = 10000;
}
{
addr = "192.168.1.18";
port = 10000;
}
];
};
};
};
postgresql = {
enable = false;
# ensureDatabases = [ "nextcloud" ];
# ensureUsers = [
# {
# name = "nextcloud"; # Здесь не хватает строчек\\
# }
# ];
};
journald = {
extraConfig = ''
SystemMaxUse=128M
'';
};
samba = {
enable = true;
settings = {
global = {
"invalid users" = [ ];
"passwd program" = "/run/wrappers/bin/passwd %u";
security = "user";
};
nixos = {
"path" = "/etc/nixos";
"browseable" = "yes";
"read only" = "no";
"valid users" = "${inputs.zeroq.devices.admin}";
"guest ok" = "no";
"writable" = "yes";
"create mask" = 644;
"directory mask" = 644;
"force user" = "root";
"force group" = "root";
};
root = {
"path" = "/";
"browseable" = "yes";
"read only" = "no";
"valid users" = "${inputs.zeroq.devices.admin}";
"guest ok" = "no";
"writable" = "yes";
#"create mask" = 0644;
#"directory mask" = 0644;
"force user" = "root";
"force group" = "root";
};
"${inputs.zeroq.devices.admin}" = {
"path" = "${inputs.zeroq.dirs.server-home}";
"browseable" = "yes";
"read only" = "no";
"valid users" = "${inputs.zeroq.devices.admin}";
"guest ok" = "no";
"writable" = "yes";
"create mask" = 700;
"directory mask" = 700;
"force user" = "${inputs.zeroq.devices.admin}";
"force group" = "users";
};
};
};
calibre-web = {
enable = true;
group = "users";
user = "${inputs.zeroq.devices.admin}";
options = {
calibreLibrary = "${inputs.zeroq.dirs.calibre-library}";
enableBookUploading = true;
enableKepubify = false;
};
listen.ip = "0.0.0.0";
listen.port = 8083;
openFirewall = true;
};
openssh = {
enable = true;
allowSFTP = true;
#knownHosts.otreca.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJpMaD143EZqhRlpAgNINLrH/qXkN3zXmKgFJlhbhGwg";
hostKeys = [
{
path = "/etc/ssh/id_ed25519";
type = "ed25519";
}
];
settings = {
PasswordAuthentication = false;
PermitRootLogin = "yes";
UsePAM = true;
};
};
transmission = {
enable = true;
credentialsFile = "${inputs.zeroq.dirs.server-home}/server/transmission/settings.json";
openRPCPort = true;
package = pkgs.transmission_4;
user = "${inputs.zeroq.devices.admin}";
group = "users";
settings = {
download-dir = "${inputs.zeroq.dirs.server-home}/Downloads";
incomplete-dir = "${inputs.zeroq.dirs.server-home}/Downloads/Temp";
incomplete-dir-enabled = true;
rpc-bind-address = "0.0.0.0";
rpc-port = 9091;
rpc-whitelist-enabled = false;
umask = 0;
};
};
syncthing = {
enable = true;
systemService = true;
guiAddress = "0.0.0.0:8384";
configDir = "${inputs.zeroq.dirs.storage}/Syncthing/${inputs.zeroq.devices.server.hostname}";
dataDir = "${inputs.zeroq.dirs.server-home}";
group = "users";
user = "${inputs.zeroq.devices.admin}";
};
tailscale.enable = true;
};
networking = {
hostName = "${inputs.zeroq.devices.server.hostname}";
networkmanager.enable = true;
firewall.enable = false;
};
system = {
stateVersion = "25.05";
};
};
in
inputs.nixpkgs.lib.nixosSystem {
modules = with inputs; [
nixosModule
];
system = "x86_64-linux";
}