This repository has no description
1.0 kB
42 lines
1{ config, pkgs, ... }:
2{
3 clan.core.vars.password-store.secretLocation = "/var/state/secret-vars";
4
5 imports = [
6 ../../2configs
7 ../../2configs/retiolum.nix
8 ../../2configs/mumble-reminder.nix
9 ../../2configs/services/git
10 ../../2configs/nginx.nix
11 ];
12
13 krebs.build.host = config.krebs.hosts.orange;
14 system.stateVersion = "24.05";
15
16 services.nginx.enable = true;
17 networking.firewall.allowedTCPPorts = [
18 80
19 443
20 ];
21 security.acme = {
22 acceptTerms = true;
23 defaults.email = "acme@lassul.us";
24 };
25
26 krebs.sync-containers3.inContainer = {
27 enable = true;
28 pubkey = builtins.readFile ./facts/orange.sync.pub;
29 };
30 clan.core.vars.generators.orange-container = {
31 files."orange.sync.key" = { };
32 files."orange.sync.pub".secret = false;
33 runtimeInputs = with pkgs; [
34 coreutils
35 openssh
36 ];
37 script = ''
38 ssh-keygen -t ed25519 -N "" -f "$out"/orange.sync.key
39 mv "$out"/orange.sync.key.pub "$out"/orange.sync.pub
40 '';
41 };
42}