forked from
lass.pds.lassul.us/superconfig
This repository has no description
974 B
35 lines
1{ config, pkgs, ... }:
2{
3 imports = [
4 ../../2configs
5 ../../2configs/retiolum.nix
6 ../../2configs/mumble-reminder.nix
7 ../../2configs/services/git
8 ../../2configs/nginx.nix
9 ];
10
11 krebs.build.host = config.krebs.hosts.orange;
12 system.stateVersion = "24.05";
13 clan.password-store.targetDirectory = "/var/state/secrets";
14
15 services.nginx.enable = true;
16 networking.firewall.allowedTCPPorts = [ 80 443 ];
17 security.acme = {
18 acceptTerms = true;
19 defaults.email = "acme@lassul.us";
20 };
21
22 krebs.sync-containers3.inContainer = {
23 enable = true;
24 pubkey = builtins.readFile ./facts/orange.sync.pub;
25 };
26 clanCore.facts.services.orange-container = {
27 secret."orange.sync.key" = { };
28 public."orange.sync.pub" = { };
29 generator.path = with pkgs; [ coreutils openssh ];
30 generator.script = ''
31 ssh-keygen -t ed25519 -N "" -f "$secrets"/orange.sync.key
32 mv "$secrets"/orange.sync.key "$facts"/orange.sync.pub
33 '';
34 };
35}