kp2pml30/dotfiles
1
0
Fork 0
mirror of https://github.com/kp2pml30/dotfiles.git synced 2026-02-16 23:34:42 +04:00
Code Issues Projects Releases Packages Wiki Activity Actions

add server

Browse source
This commit is contained in:
kp2pml30 2025-01-26 19:33:07 +04:00
parent 284b131058
commit 95f65d9c03
18 changed files with 358 additions and 112 deletions
Download patch file Download diff file Expand all files Collapse all files

34
nix/hardware/common.nix
View file

@ -4,25 +4,23 @@
, ...
}:
{
hardware.enableRedistributableFirmware = true;
boot = {
loader.grub = {
enable = true;
devices = [ "nodev" ];
efiSupport = true;
useOSProber = true;
};
loader.efi.canTouchEfiVariables = true;
initrd.availableKernelModules = [ "nvme" "xhci_pci" "usb_storage" "sd_mod" "sdhci_pci" ];
initrd.kernelModules = [ ];
extraModulePackages = [ ];
options.kp2pml30.boot = {
efiGrub = lib.mkEnableOption "";
};
networking = {
networkmanager.enable = true;
useDHCP = lib.mkDefault true;
imports = [
./efiGrub.nix
];
config = {
hardware.enableRedistributableFirmware = true;
boot = {
loader.efi.canTouchEfiVariables = true;
initrd.availableKernelModules = [ "nvme" "xhci_pci" "usb_storage" "sd_mod" "sdhci_pci" "uas" "usbcore" ];
initrd.kernelModules = [ ];
extraModulePackages = [ ];
};
};
}

17
nix/hardware/efiGrub.nix Normal file
View file

@ -0,0 +1,17 @@
{ pkgs
, config
, lib
, inputs
, rootPath
, ...
}:
let
cfg = config.kp2pml30.boot;
in lib.mkIf cfg.efiGrub {
boot.loader.grub = {
enable = true;
devices = [ "nodev" ];
efiSupport = true;
useOSProber = true;
};
}

5
nix/hardware/ideapad.nix
View file

@ -39,4 +39,9 @@
support32Bit.enable = true;
};
};
networking = {
networkmanager.enable = true;
useDHCP = lib.mkDefault true;
};
}

58
nix/hardware/server.nix Normal file
View file

@ -0,0 +1,58 @@
{ pkgs
, inputs
, lib
, ...
}:
{
imports = [
./common.nix
];
boot.initrd.availableKernelModules = [
"xhci_pci"
"ehci_pci"
"ahci"
"usbhid"
"usb_storage"
"sd_mod"
"virtio_balloon"
"virtio_blk"
"virtio_pci"
"virtio_ring"
];
fileSystems."/" = {
device = "/dev/disk/by-uuid/4a450f44-a611-4f12-9628-8d5da7cf0180";
fsType = "ext4";
};
fileSystems."/boot" = {
device = "/dev/disk/by-uuid/985D-9086";
fsType = "vfat";
options = [ "fmask=0077" "dmask=0077" ];
};
boot = {
loader.grub = {
enable = true;
#efiSupport = true;
#efiInstallAsRemovable = true;
devices = [ "/dev/vda" ];
};
};
services.qemuGuest.enable = true;
networking = {
hostName = "v168671";
interfaces.ens3.ipv4.addresses = [ {
prefixLength = 24;
address = "185.121.233.63";
} ];
defaultGateway = "185.121.233.1";
nameservers = [
"1.1.1.1"
"8.8.8.8"
];
};
}

4
nix/personal/default.nix
View file

@ -54,10 +54,6 @@ in {
fishPlugins.bass
grc
fira-code
fira-code-nerdfont
#nerd-fonts.fira-code
];
nixpkgs.config.allowUnfreePredicate = pkg:

5
nix/personal/graphical/default.nix
View file

@ -14,4 +14,9 @@ in {
./opera.nix
./steam.nix
];
environment.systemPackages = with pkgs; [
fira-code
fira-code-nerdfont
];
}

22
nix/personal/graphical/vscode.nix
View file

@ -13,11 +13,15 @@ in lib.mkIf cfg.vscode {
package = pkgs.vscode;
mutableExtensionsDir = false;
userSettings = lib.importJSON("${rootPath}/vscode/settings.json");
extensions = [
pkgs.vscode-extensions.eamodio.gitlens
extensions = with pkgs; [
vscode-extensions.eamodio.gitlens
vscode-extensions.editorconfig.editorconfig
pkgs.vscode-extensions.streetsidesoftware.code-spell-checker
vscode-extensions.bierner.markdown-mermaid
vscode-extensions.tamasfe.even-better-toml
vscode-extensions.streetsidesoftware.code-spell-checker
(pkgs.vscode-utils.buildVscodeMarketplaceExtension {
mktplcRef = {
name = "code-spell-checker-russian";
@ -29,18 +33,6 @@ in lib.mkIf cfg.vscode {
license = lib.licenses.mit;
};
})
(pkgs.vscode-utils.buildVscodeMarketplaceExtension {
mktplcRef = {
name = "vscode-lldb";
publisher = "vadimcn";
version = "1.11.1";
sha256 = "urWkXVwD6Ad7DFVURc6sLQhhc6iKCgY89IovIWByz9U=";
};
meta = {
license = lib.licenses.mit;
};
})
];
};
};

45
nix/server.nix
View file

@ -1,45 +0,0 @@
{ config, pkgs, ... }:
let
mhostname = "example.org" ;
in
{
services.openssh = {
enable = true;
ports = [ 22 ];
openFirewall = true;
settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
AllowUsers = [ "kp2pml30-serv" ];
};
};
users.users.kp2pml30-serv = import ./user.nix;
users.users.nginx.extraGroups = [ "acme" ];
security.acme = {
acceptTerms = true;
defaults.email = "kp2pml30@gmail.com";
certs."${mhostname}" = {
serverAliases = [ "*.${mhostname}" ];
webroot = "/var/lib/acme/.challenges";
group = "nginx";
#extraDomainNames = [ "mail.example.org" ];
};
};
services.nginx = {
virtualHosts."${mhostname}" = {
enableACME = true;
listen = [
{ port = 80; }
];
locations."/.well-known/acme-challenge/" = {
root = "/var/lib/acme/.challenges";
};
locations."/" = {
return = 404;
};
};
streamConfig = (builtins.readFile ./stream.nginx);
};
}

5
nix/server/boot.nix Normal file
View file

@ -0,0 +1,5 @@
{ config, pkgs, ... }:
let
cfg = config.kp2pml30.server;
in {
}

38
nix/server/default.nix Normal file
View file

@ -0,0 +1,38 @@
{ config
, pkgs
, lib
, ...
}:
let
cfg = config.kp2pml30.server;
in {
options.kp2pml30.server = {
username = lib.mkOption {
type = lib.types.str;
default = "kp2pml30-serv";
};
hostname = lib.mkOption {
type = lib.types.str;
default = null;
};
nginx = lib.mkEnableOption "";
};
imports = [
./ssh.nix
./nginx.nix
./boot.nix
];
config = {
users.users."${cfg.username}" = {
isNormalUser = true;
openssh.authorizedKeys.keys = [
"ssh-rsa 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 kp2pml30@r3vdy2b10vv-pc"
];
extraGroups = [ "wheel" "networkmanager" "acme" ];
hashedPassword = "$6$UK6oHr2gPRYD4Rak$lgF.mYReC0jahNuI4kt0j/CsrajVzMprvp3HgjKwwsjYHU6/Ur9jfROXZbKhhpyCLRmnlCpWeRCbHEYO/jhIv/";
};
};
}

38
nix/server/nginx.nix Normal file
View file

@ -0,0 +1,38 @@
{ config
, pkgs
, lib
, ...
}:
let
cfg = config.kp2pml30.server;
in lib.mkIf cfg.nginx {
security.acme = {
acceptTerms = true;
defaults.email = "kp2pml30@gmail.com";
certs."${cfg.hostname}" = {
serverAliases = [ "*.${cfg.hostname}" ];
webroot = "/var/lib/acme/.challenges";
group = "nginx";
};
};
services.nginx = {
enable = true;
virtualHosts."${cfg.hostname}" = {
addSSL = true;
enableACME = true;
listen = [
{ port = 80; }
];
locations."/.well-known/acme-challenge/" = {
root = "/var/lib/acme/.challenges";
};
locations."/" = {
return = 404;
};
};
streamConfig = (builtins.readFile ./stream.nginx);
};
}

20
nix/server/ssh.nix Normal file
View file

@ -0,0 +1,20 @@
{ config
, pkgs
, lib
, ...
}:
let
cfg = config.kp2pml30.server;
in {
services.openssh = {
enable = true;
ports = [ 22 ];
openFirewall = true;
settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
PermitRootLogin = lib.mkForce "no";
AllowUsers = [ cfg.username ];
};
};
}

8
nix/server/user.nix
View file

@ -1,8 +0,0 @@
{ config, pkgs, ... }:
{
isNormalUser = true;
openssh.authorizedKeys.keys = [
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCmc+wSjdvbyiFmB55r1ilegor533eo7hsE62z+pXCu0YIaVZwUoRe0Sqj0GoMzfn80jXubNmQgV+Wk8byz/xAsZ4R9Y/PFVuZYA/uDRAQ0TXpqxBSCH2CHkwioolg6q+sMXdUJTvvKkCpluXVk8o9ZN+5+rBhc2xAeZw2FDbz+u2HHYN8zCXFB3MPPJNG9CscBQirBgOkhg0ASCJ2rahaAJVaBosS7DD6S6iEip8bGgwByuWJl0oZr9cdJHkQDl2AMdNZrxoPcLqItCk5Mz9ssxTcK0lj/xIBXqLNMe4RPUJeWOOMNexeKRbzJEaF+G3Pfboqqeg7UPM6/9h9CXW9cyY/DXEj2pQmEi2jYWdTpx/ViCg83/rLboGyiyAuE6AWGte8r5YqYKuFEB0ixswENlH0s4TXEmouimRRkypzT4KAJ/ObPLsnGAkbzbLcsPCQUQSywQ8TGo3b72gNWTKjn9PeqBZkzgU9AXtxN1hCmKAX+/KwnGUSqyDz2YRhcO1E= kp2pml30@r3vdy2b10vv-pc"
];
extraGroups = [ "wheel" "networkmanager" ];
}