{ lib, config, pkgs, ... }: { imports = [ ./hardware-configuration ../../system/all/defaults.nix ../../components ../../modules ./service-forgejo.nix ./service-hedgedoc.nix ./service-photoprism.nix ./service-taskserver.nix ./service-vaultwarden.nix #./service-surrealdb.nix # not really needed at the moment ./service-vikunja.nix ./nginx-ingolf-wagner-de.nix ./nginx-wkd.nix ./network-tinc.nix ./network-wireguard.nix ./media-arr.nix ./media-jellyfin.nix ./media-nextcloud.nix ./media-share.nix ./media-syncthing.nix ./media-transmission2.nix #./social-jitsi.nix ./social-matrix-terranix.nix ]; services.logrotate.checkConfig = false; # because uid 3000 does not exist in here networking.hostName = "orbi"; components.terminal.enable = true; components.mainUser.enable = true; components.gui.enable = false; components.network.enable = true; components.network.nginx.landingpage.enable = false; components.network.wifi.enable = false; components.network.fail2ban.enable = true; components.network.sshd.sshguard.enable = false; components.monitor.enable = true; networking.firewall.interfaces.wg0.allowedTCPPorts = [ 4317 ]; networking.firewall.interfaces.wg0.allowedUDPPorts = [ 4317 ]; components.monitor.opentelemetry.receiver.endpoint = "0.0.0.0:4317"; components.monitor.opentelemetry.exporter.endpoint = "10.100.0.2:4317"; # chnungus security.acme.acceptTerms = true; security.acme.defaults.email = "contact@ingolf-wagner.de"; # chungus rsync users.users.root.openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJkqVvuJSvRMO5pG2CHNNBxjB7HlJudK4TQs3BhbOWOD" ]; # todo : need this for syncoid environment.systemPackages = [ pkgs.mbuffer pkgs.lzop pkgs.gzip ]; }