System/machines/pendulum/configuration.nix

95 lines
2.2 KiB
Nix
Raw Normal View History

2023-06-04 09:59:01 -04:00
{ config, lib, pkgs, inputs, ... }:
{
2023-06-10 20:50:52 -04:00
imports = [ ./matrix.nix ./automation.nix ];
2023-06-04 09:59:01 -04:00
# Sops setup for this machine
sops.secrets = {
"borg-ssh-key" = {
sopsFile = ../../secrets/pendulum/borg.yaml;
format = "yaml";
};
"borg-password" = {
sopsFile = ../../secrets/pendulum/borg.yaml;
format = "yaml";
};
2023-06-04 12:31:53 -04:00
"matrix-secrets.yaml" = {
owner = "matrix-synapse";
format = "binary";
sopsFile = ../../secrets/pendulum/recaptcha;
};
2023-06-04 09:59:01 -04:00
};
# Setup system configuration
nathan = {
services = {
2023-06-04 12:31:53 -04:00
nginx = {
enable = true;
acme = true;
};
matrix = {
enable = true;
baseDomain = "community.rs";
enableRegistration = true;
};
2023-06-04 09:59:01 -04:00
borg = {
enable = true;
extraExcludes = [
"*/.cache"
"*/.tmp"
"/var/lib/postgresql"
"/var/lib/redis"
"/var/lib/docker"
"/var/log"
];
passwordFile = config.sops.secrets."borg-password".path;
sshKey = config.sops.secrets."borg-ssh-key".path;
};
2023-06-04 12:31:53 -04:00
postgresql.backup = true;
2023-06-04 09:59:01 -04:00
};
config = {
setupGrub = false;
nix = {
autoUpdate = true;
autoGC = true;
};
harden = false;
virtualization = { docker = true; };
};
};
# State version
system.stateVersion = "23.05";
2023-06-04 21:51:44 -04:00
# Postgres version and tuning
services.postgresql = {
2023-06-10 20:54:24 -04:00
package = pkgs.postgresql_15_jit;
2023-06-04 21:51:44 -04:00
settings = {
shared_buffers = "4GB";
effective_cache_size = "8GB";
work_mem = "64MB";
maintenance_work_mem = "128MB";
};
};
2023-06-04 09:59:01 -04:00
# Configure bootloader
boot.loader.grub.enable = true;
boot.loader.grub.device = "/dev/sda";
boot.loader.grub.useOSProber = true;
# Configure networking
networking = {
domain = "mccarty.io";
useDHCP = false;
interfaces.enp1s0f0.ipv4.addresses = [{
address = "45.83.129.50";
prefixLength = 24;
}];
defaultGateway = "45.83.129.49";
nameservers = [ "1.1.1.1" ];
# Open ports in firewall
firewall = {
# allowedTCPPorts = [ 25565 ];
# allowedUDPPorts = [ 25565 ];
};
};
# Setup home manager
home-manager.users.nathan = import ./home.nix;
2023-06-04 12:31:53 -04:00
2023-06-04 09:59:01 -04:00
}