nixos-config/nixos/machines/chungus/configuration.nix
2024-06-03 20:01:14 +02:00

100 lines
2.5 KiB
Nix

{ config, pkgs, lib, ... }: {
imports = [
# todo : remove
../../system/all
../../components
../../modules
./hardware-configuration
./packages.nix
./network-tinc-retiolum.nix # make sure no service is open for this vpn!
./network-tinc.nix
./network-wireguard.nix
./hass-mqtt.nix
./hass-zigbee2mqtt.nix
./hass.nix
# todo: add autotag again
#./taskwarrior-autotag.nix
./media-audiobookshelf.nix
./media-castget.nix
./media-curl.nix
./media-jellyfin.nix
./media-share.nix
./media-syncthing.nix
./media-youtube.nix
./telemetry/grafana.nix
./telemetry/telegraf-smart.nix
./telemetry/telegraf.nix
./telemetry/prometheus.nix
./telemetry/loki.nix # todo enable this one again
./sync-rbackup.nix
./sync-syncoid.nix
./service-atuin.nix
./service-paperless.nix
./services-forgejo.nix
./services-s3.nix
./services-vault.nix
];
components.gui.enable = false;
components.mainUser.enable = true;
components.media.tts-server.enable = false;
components.network.enable = true;
components.network.wifi.enable = false;
components.terminal.enable = true;
components.monitor.enable = true;
networking.firewall.interfaces.wg0.allowedTCPPorts = [ 4317 ];
networking.firewall.interfaces.wg0.allowedUDPPorts = [ 4317 ];
components.monitor.opentelemetry.receiver.endpoint = "0.0.0.0:4317";
services.printing.enable = false;
#virtualisation.containers.storage.settings = {
# # fixes: Error: 'overlay' is not supported over zfs, a mount_program is required: backing file system is unsupported for this graph driver
# storage.options.mount_program = "${pkgs.fuse-overlayfs}/bin/fuse-overlayfs";
#};
virtualisation.podman.extraPackages = [ pkgs.zfs ]; # make sure /var/lib/containers/storage is a zfs dataset
sops.defaultSopsFile = ../../secrets/chungus.yaml;
networking.hostName = "chungus";
hardware.opengl = {
enable = true;
extraPackages = with pkgs; [
intel-media-driver # LIBVA_DRIVER_NAME=iHD
vaapiIntel # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
vaapiVdpau
libvdpau-va-gl
];
};
# just enable lan
#networking.dhcpcd.allowInterfaces = [ "enp0s25" ];
# nix-shell -p speedtest_cli --run speedtest
#configuration.fireqos = {
# enable = false;
# interface = "enp0s25";
# input = 200000;
# output = 2000;
# balance = false;
#};
system.stateVersion = "23.11";
}