123

2026-06-11 04:30:41 +03:00 · 2025-07-23 13:29:07 +03:00
parent 40fa9fba58
commit cada2d4878
3 changed files with 211 additions and 0 deletions
@@ -0,0 +1,209 @@
+{ inputs, ... }@flakeContext:
+let
+  nixosModule =
+    {
+      config,
+      lib,
+      pkgs,
+      ...
+    }:
+    {
+      imports = with inputs; [
+        #./hardware/vds.nix
+        self.nixosModules.default
+
+        #self.nixosModules.desktop
+        # self.nixosModules.server.cloudflared
+        # self.nixosModules.server.immich
+        # self.nixosModules.server.nextcloud
+        # self.nixosModules.server.nginx
+        # self.nixosModules.server.zerotier
+        # self.nixosModules.software.beets
+        #self.nixosModules.extra.self.zapret
+
+        #self.homeConfigurations.server.nixosModule # home-manager configuration module
+      ];
+
+      #boot = {
+        #kernelPackages = pkgs.linuxPackages_xanmod_stable; # pkgs.linuxPackages_xanmod_stable
+        #hardwareScan = true;
+        #loader = {
+        #  systemd-boot.enable = lib.mkDefault true;
+        #  efi.canTouchEfiVariables = lib.mkDefault true;
+        #};
+      #};
+
+      #hardware = {
+      #  bluetooth.enable = true;
+      #};
+
+      #swapDevices =
+      #  [ { device = "/dev/disk/by-partlabel/disk-main-swap"; }
+      #  ];
+
+      users = {
+        users = {
+          "${inputs.zeroq.devices.admin}" = {
+            openssh.authorizedKeys.keys = [
+              "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKduJia+unaQQdN6X5syaHvnpIutO+yZwvfiCP4qKQ/P"
+            ];
+          };
+        };
+      };
+
+      # fileSystems = {
+      #   # External drive
+      #   "${inputs.zeroq.dirs.server-home}" = {
+      #     device = "/dev/disk/by-uuid/37e53ebc-5343-a94d-9fe2-0ca39e13a8de";
+      #     fsType = "ext4";
+      #     options = [
+      #       #"nofail"
+      #       "x-systemd.device-timeout=0"
+      #     ];
+      #   };
+      #   # Archive drive
+      #   "/mnt/archive" = {
+      #     device = "/dev/disk/by-label/archive";
+      #     fsType = "exfat";
+      #     options = [
+      #       "nofail"
+      #       "x-systemd.device-timeout=0"
+      #       "uid=1000"
+      #       "gid=1000"
+      #     ];
+      #   };
+      #   # beets
+      #   "/mnt/beets/music" = {
+      #     device = "${inputs.zeroq.dirs.server-home}/Music";
+      #     options = [
+      #       "bind"
+      #       "uid=1000"
+      #       "gid=1000"
+      #       "fmask=0007"
+      #       "dmask=0007"
+      #       "nofail"
+      #       "x-systemd.device-timeout=0"
+      #     ];
+      #   };
+      # };
+
+      services = {
+        #power-profiles-daemon.enable = lib.mkForce false;
+        earlyoom.enable = true;
+        preload.enable = true;
+        #auto-cpufreq.enable = true;
+        throttled.enable = true;
+        journald = {
+          extraConfig = ''
+            SystemMaxUse=128M
+          '';
+        };
+        samba = {
+          enable = true;
+          settings = {
+            global = {
+              "invalid users" = [ ];
+              "passwd program" = "/run/wrappers/bin/passwd %u";
+              security = "user";
+            };
+            nixos = {
+              "path" = "/etc/nixos";
+              "browseable" = "yes";
+              "read only" = "no";
+              "valid users" = "${inputs.zeroq.devices.admin}";
+              "guest ok" = "no";
+              "writable" = "yes";
+              "create mask" = 644;
+              "directory mask" = 644;
+              "force user" = "${inputs.zeroq.devices.admin}";
+              "force group" = "users";
+            };
+            root = {
+              "path" = "/";
+              "browseable" = "yes";
+              "read only" = "no";
+              "valid users" = "${inputs.zeroq.devices.admin}";
+              "guest ok" = "no";
+              "writable" = "yes";
+              #"create mask" = 0644;
+              #"directory mask" = 0644;
+              "force user" = "root";
+              "force group" = "root";
+            };
+          };
+        };
+        # calibre-web = {
+        #   enable = true;
+        #   group = "users";
+        #   user = "${inputs.zeroq.devices.admin}";
+        #   options = {
+        #     calibreLibrary = "${inputs.zeroq.dirs.calibre-library}";
+        #     enableBookUploading = true;
+        #     enableKepubify = false;
+        #   };
+        #   listen.ip = "0.0.0.0";
+        #   listen.port = 8083;
+        #   openFirewall = true;
+        # };
+        openssh = {
+          enable = true;
+          allowSFTP = true;
+          #knownHosts.otreca.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJpMaD143EZqhRlpAgNINLrH/qXkN3zXmKgFJlhbhGwg";
+          hostKeys = [
+            {
+              path = "/etc/ssh/id_ed25519";
+              type = "ed25519";
+            }
+          ];
+          settings = {
+            PasswordAuthentication = false;
+            PermitRootLogin = "yes";
+            UsePAM = true;
+          };
+        };
+        # transmission = {
+        #   enable = false;
+        #   credentialsFile = "${inputs.zeroq.dirs.server-home}/server/transmission/settings.json";
+        #   openRPCPort = true;
+        #   package = pkgs.transmission_4;
+        #   user = "${inputs.zeroq.devices.admin}";
+        #   group = "users";
+        #   settings = {
+        #     download-dir = "${inputs.zeroq.dirs.server-home}/Downloads";
+        #     incomplete-dir = "${inputs.zeroq.dirs.server-home}/Downloads/Temp";
+        #     incomplete-dir-enabled = true;
+        #     rpc-bind-address = "0.0.0.0";
+        #     rpc-port = 9091;
+        #     rpc-whitelist-enabled = false;
+        #     umask = 0;
+        #   };
+        # };
+        # syncthing = {
+        #   enable = true;
+        #   systemService = true;
+        #   guiAddress = "0.0.0.0:8384";
+        #   configDir = "${inputs.zeroq.dirs.storage}/Syncthing/${inputs.zeroq.devices.server.hostname}";
+        #   dataDir = "${inputs.zeroq.dirs.server-home}";
+        #   group = "users";
+        #   user = "${inputs.zeroq.devices.admin}";
+        # };
+        tailscale.enable = true;
+      };
+
+      networking = {
+        hostName = "${inputs.zeroq.devices.vds.hostname}";
+        networkmanager.enable = true;
+        firewall.enable = false;
+      };
+
+      system = {
+        stateVersion = "25.05";
+      };
+    };
+in
+inputs.nixpkgs.lib.nixosSystem {
+  modules = with inputs; [
+    nixosModule
+  ];
+  system = "x86_64-linux";
+}