30 lines
602 B
Nix
30 lines
602 B
Nix
|
{ pkgs, ... }: {
|
||
|
|
imports = [
|
||
|
|
./hardware-configuration.nix
|
||
|
|
./webserver.nix
|
||
|
|
./firewall-web.nix
|
||
|
|
../modules/gitea.nix
|
||
|
|
../modules/prometheus-node.nix
|
||
|
|
../modules/common.nix
|
||
|
|
../modules/users.nix
|
||
|
|
];
|
||
|
|
|
||
|
|
boot.cleanTmpDir = true;
|
||
|
|
zramSwap.enable = false;
|
||
|
|
networking.hostName = "web";
|
||
|
|
services.openssh = {
|
||
|
|
enable = true;
|
||
|
|
permitRootLogin = "no";
|
||
|
|
passwordAuthentication = false;
|
||
|
|
challengeResponseAuthentication = false;
|
||
|
|
};
|
||
|
|
|
||
|
|
# Nix Garbage Collector
|
||
|
|
nix.gc = {
|
||
|
|
automatic = true;
|
||
|
|
dates = "weekly";
|
||
|
|
options = "--delete-older-than 7d";
|
||
|
|
};
|
||
|
|
|
||
|
|
}
|