Initial conduit container setup

This commit is contained in:
Nathan McCarty 2025-03-27 02:13:19 -04:00
parent 8b165b7a60
commit 8dfd30b333
3 changed files with 67 additions and 4 deletions

View file

@ -1,10 +1,12 @@
# Edit this configuration file to define what should be installed on
# your system. Help is available in the configuration.nix(5) man page, on
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
{ config, lib, pkgs, ... }:
{
config,
lib,
pkgs,
...
}: {
# Use the systemd-boot EFI boot loader.
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
@ -15,6 +17,25 @@
i18n.defaultLocale = "en_US.UTF-8";
system.stateVersion = "24.11"; # Did you read the comment?
networking.nat = {
enable = true;
internalInterfaces = ["ve-+"];
externalInterface = "enp5s0f0";
# Lazy IPv6 connectivity for the container
enableIPv6 = true;
};
# Nginx configuration
# Configure automated TLS acquisition/renewal
security.acme = {
acceptTerms = true;
defaults = {
email = "admin@stranger.systems";
};
};
# ACME data must be readable by the NGINX user
# users.users.nginx.extraGroups = [
# "acme"
# ];
}