pepe: configure vsftpd for scanner

configs/pepe/configuration.nix

@@ -10,6 +10,7 @@
     ./syncthing.nix
     ./tinc.nix
     ./wifi-access-point.nix
+    ./vsftpd.nix
 
   ];
 

configs/pepe/vsftpd.nix

@@ -0,0 +1,23 @@
+{ lib, pkgs, config, ... }: {
+
+  services.vsftpd = {
+    enable = true;
+    userlist = [ "ftp-upload" ];
+    userlistEnable = true;
+    localUsers = true;
+    writeEnable = true;
+  };
+
+  users.users.ftp-upload = {
+    passwordFile = toString <secrets/ftp/password>;
+    isNormalUser = true;
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    20 # ftp
+    21 # ftp
+  ];
+
+  networking.firewall.allowedTCPPortRanges = [ {from = 1024 ; to = 65535; }];
+
+}

system/all/default.nix

@@ -26,6 +26,7 @@
     ./syncthing.nix
     ./tinc.nix
     ./on-failure.nix
+    ./hosts.nix
 
   ];
 

system/all/hosts.nix

@@ -0,0 +1,5 @@
+{
+  networking.extraHosts = ''
+    192.168.0.24 scanner
+  '';
+}