nixos-config/nixos/machines/chungus/configuration.nix
2024-05-15 14:39:21 +02:00

120 lines
2.7 KiB
Nix

{ config, pkgs, lib, ... }: {
imports = [
# todo : remove
../../system/all
../../components
../../modules
./hardware-configuration
./packages.nix
./network-wireguard.nix
./network-tinc.nix
./network-tinc-retiolum.nix # make sure no service is open for this vpn!
./hass.nix
./hass-zigbee2mqtt.nix
./hass-mqtt.nix
#./hass-wifi.nix
#./mail-fetcher.nix
#./borg.nix
./taskwarrior-autotag.nix
./media-share.nix
./media-audiobookshelf.nix
./media-jellyfin.nix
./media-youtube.nix
./media-castget.nix
./media-curl.nix
./media-syncthing.nix
# logging
./grafana.nix
./telemetry/telegraf-smart.nix
./telemetry/telegraf.nix
#./telemetry/opentelemetry-hass.nix
./telemetry/prometheus.nix
./telemetry/loki.nix
#./telemetry/promtail.nix
#./home-display.nix
./sync-rbackup.nix
./sync-torrent.nix
./sync-script.nix
./sync-syncoid.nix
./services-s3.nix
./services-vault.nix
./services-forgejo.nix
#./kiosk.nix
./trilium.nix
./atuin.nix
./cache.nix
./docker-registry.nix
./paperless.nix
];
components.gui.enable = false;
components.mainUser.enable = true;
components.media.tts-server.enable = false;
components.network.enable = true;
components.network.wifi.enable = false;
components.terminal.enable = true;
components.monitor.enable = true;
networking.firewall.interfaces.wg0.allowedTCPPorts = [ 4317 ];
networking.firewall.interfaces.wg0.allowedUDPPorts = [ 4317 ];
components.monitor.opentelemetry.receiver.endpoint = "0.0.0.0:4317";
services.printing.enable = false;
#virtualisation.containers.storage.settings = {
# # fixes: Error: 'overlay' is not supported over zfs, a mount_program is required: backing file system is unsupported for this graph driver
# storage.options.mount_program = "${pkgs.fuse-overlayfs}/bin/fuse-overlayfs";
#};
virtualisation.podman.extraPackages = [ pkgs.zfs ]; # make sure /var/lib/containers/storage is a zfs dataset
sops.defaultSopsFile = ../../secrets/chungus.yaml;
networking.hostName = "chungus";
hardware.opengl = {
enable = true;
extraPackages = with pkgs; [
intel-media-driver # LIBVA_DRIVER_NAME=iHD
vaapiIntel # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
vaapiVdpau
libvdpau-va-gl
];
};
# just enable lan
#networking.dhcpcd.allowInterfaces = [ "enp0s25" ];
# nix-shell -p speedtest_cli --run speedtest
#configuration.fireqos = {
# enable = false;
# interface = "enp0s25";
# input = 200000;
# output = 2000;
# balance = false;
#};
system.stateVersion = "23.11";
}