2016-04-14 14:02:16 +02:00
|
|
|
|
# Edit this configuration file to define what should be installed on
|
|
|
|
|
# your system. Help is available in the configuration.nix(5) man page
|
|
|
|
|
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
|
|
|
|
|
|
|
|
|
{ config, pkgs, lib, ... }:
|
|
|
|
|
|
|
|
|
|
let
|
|
|
|
|
secrets = import <secrets>;
|
|
|
|
|
yoricc = import ../packages/yori-cc.nix;
|
|
|
|
|
in
|
|
|
|
|
{
|
|
|
|
|
imports = [
|
2017-02-02 17:22:03 +01:00
|
|
|
|
../physical/kassala.nix
|
2016-04-14 14:02:16 +02:00
|
|
|
|
../roles/common.nix
|
2017-01-26 14:45:11 +01:00
|
|
|
|
../roles/collectd.nix
|
|
|
|
|
../roles/graphs.nix
|
2017-02-02 16:58:48 +01:00
|
|
|
|
../roles/xmpp.nix
|
|
|
|
|
../roles/website.nix
|
|
|
|
|
../roles/mail.nix
|
2016-04-21 22:45:06 +02:00
|
|
|
|
../modules/tor-hidden-service.nix
|
2016-04-29 01:07:06 +02:00
|
|
|
|
../modules/muflax-blog.nix
|
2017-02-02 16:58:48 +01:00
|
|
|
|
../roles/asterisk.nix
|
2016-04-14 14:02:16 +02:00
|
|
|
|
];
|
|
|
|
|
|
|
|
|
|
networking.hostName = secrets.hostnames.pennyworth;
|
|
|
|
|
|
2016-09-19 20:54:40 +02:00
|
|
|
|
services.nixosManual.enable = false;
|
|
|
|
|
|
2016-04-22 19:12:59 +02:00
|
|
|
|
environment.noXlibs = true;
|
|
|
|
|
|
2016-04-14 14:02:16 +02:00
|
|
|
|
networking.enableIPv6 = lib.mkOverride 30 true;
|
|
|
|
|
|
|
|
|
|
system.stateVersion = "16.03";
|
2017-02-02 16:58:48 +01:00
|
|
|
|
|
|
|
|
|
nginxssl.enable = true;
|
2016-04-14 14:02:16 +02:00
|
|
|
|
|
2017-01-30 17:41:54 +01:00
|
|
|
|
services.nginx.virtualHosts."pad.yori.cc" = {
|
|
|
|
|
enableACME = true;
|
|
|
|
|
forceSSL = true;
|
|
|
|
|
locations."/" = {
|
|
|
|
|
proxyPass = "http://127.0.0.1:9140";
|
|
|
|
|
};
|
|
|
|
|
};
|
2016-04-21 22:45:06 +02:00
|
|
|
|
|
2016-04-22 19:12:59 +02:00
|
|
|
|
# hidden SSH service
|
|
|
|
|
|
2016-04-21 22:45:06 +02:00
|
|
|
|
services.tor.hiddenServices = [
|
|
|
|
|
{ name = "ssh";
|
|
|
|
|
port = 22;
|
2016-04-29 01:05:09 +02:00
|
|
|
|
hostname = secrets.tor_hostnames."ssh.pennyworth";
|
2016-04-21 22:45:06 +02:00
|
|
|
|
private_key = "/run/keys/torkeys/ssh.pennyworth.key"; }
|
|
|
|
|
];
|
2016-04-22 19:12:59 +02:00
|
|
|
|
|
2016-04-29 01:07:06 +02:00
|
|
|
|
|
|
|
|
|
services.muflax-blog = {
|
|
|
|
|
enable = true;
|
|
|
|
|
web-server = {
|
|
|
|
|
port = 9001;
|
|
|
|
|
};
|
|
|
|
|
hidden-service = {
|
|
|
|
|
hostname = "muflax65ngodyewp.onion";
|
|
|
|
|
private_key = "/run/keys/torkeys/http.muflax.key";
|
|
|
|
|
};
|
|
|
|
|
};
|
2016-04-14 14:02:16 +02:00
|
|
|
|
}
|