2023-09-08 02:10:40 +02:00
|
|
|
{ config, pkgs, values, ... }:
|
|
|
|
|
{
|
|
|
|
|
imports = [
|
|
|
|
|
# Include the results of the hardware scan.
|
|
|
|
|
./hardware-configuration.nix
|
|
|
|
|
../../base.nix
|
|
|
|
|
../../misc/metrics-exporters.nix
|
2023-09-16 22:21:47 +02:00
|
|
|
|
2023-09-17 03:28:31 +02:00
|
|
|
./services/nginx.nix
|
2023-09-16 22:21:47 +02:00
|
|
|
./services/kanidm.nix
|
2023-09-08 02:10:40 +02:00
|
|
|
];
|
|
|
|
|
|
|
|
|
|
sops.defaultSopsFile = ../../secrets/shark/shark.yaml;
|
|
|
|
|
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
|
|
|
|
sops.age.keyFile = "/var/lib/sops-nix/key.txt";
|
|
|
|
|
sops.age.generateKey = true;
|
|
|
|
|
|
|
|
|
|
boot.loader.systemd-boot.enable = true;
|
|
|
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
|
|
|
|
2023-09-16 22:21:47 +02:00
|
|
|
networking.hostName = "shark";
|
2023-09-08 02:10:40 +02:00
|
|
|
|
|
|
|
|
systemd.network.networks."30-ens18" = values.defaultNetworkConfig // {
|
|
|
|
|
matchConfig.Name = "ens18";
|
2023-09-08 02:33:22 +02:00
|
|
|
address = with values.hosts.shark; [ (ipv4 + "/25") (ipv6 + "/64") ];
|
2023-09-08 02:10:40 +02:00
|
|
|
};
|
|
|
|
|
|
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
|
|
|
];
|
|
|
|
|
|
|
|
|
|
system.stateVersion = "23.05"; # Did you read the comment?
|
|
|
|
|
|
|
|
|
|
}
|
