This repository has no description
914 B
40 lines
1{ pkgs, ... }:
2{
3 clan.core.vars.password-store.secretLocation = "/var/state/secret-vars";
4
5 imports = [
6 ../../configs
7 ../../configs/retiolum.nix
8 ../../configs/mumble-reminder.nix
9 ../../configs/nginx.nix
10 ];
11
12 system.stateVersion = "24.05";
13
14 services.nginx.enable = true;
15 networking.firewall.allowedTCPPorts = [
16 80
17 443
18 ];
19 security.acme = {
20 acceptTerms = true;
21 defaults.email = "acme@lassul.us";
22 };
23
24 krebs.sync-containers3.inContainer = {
25 enable = true;
26 pubkey = builtins.readFile ./facts/orange.sync.pub;
27 };
28 clan.core.vars.generators.orange-container = {
29 files."orange.sync.key" = { };
30 files."orange.sync.pub".secret = false;
31 runtimeInputs = with pkgs; [
32 coreutils
33 openssh
34 ];
35 script = ''
36 ssh-keygen -t ed25519 -N "" -f "$out"/orange.sync.key
37 mv "$out"/orange.sync.key.pub "$out"/orange.sync.pub
38 '';
39 };
40}