This repository has no description
970 B
41 lines
1{ config, pkgs, ... }:
2{
3 clan.core.vars.password-store.secretLocation = "/var/state/secret-vars";
4
5 imports = [
6 ../../configs
7 ../../configs/retiolum.nix
8 ../../configs/mumble-reminder.nix
9 ../../configs/nginx.nix
10 ];
11
12 krebs.build.host = config.krebs.hosts.orange;
13 system.stateVersion = "24.05";
14
15 services.nginx.enable = true;
16 networking.firewall.allowedTCPPorts = [
17 80
18 443
19 ];
20 security.acme = {
21 acceptTerms = true;
22 defaults.email = "acme@lassul.us";
23 };
24
25 krebs.sync-containers3.inContainer = {
26 enable = true;
27 pubkey = builtins.readFile ./facts/orange.sync.pub;
28 };
29 clan.core.vars.generators.orange-container = {
30 files."orange.sync.key" = { };
31 files."orange.sync.pub".secret = false;
32 runtimeInputs = with pkgs; [
33 coreutils
34 openssh
35 ];
36 script = ''
37 ssh-keygen -t ed25519 -N "" -f "$out"/orange.sync.key
38 mv "$out"/orange.sync.key.pub "$out"/orange.sync.pub
39 '';
40 };
41}