albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Update nuc-server

Browse source
This commit is contained in:
iFargle 2024-01-12 16:45:55 +09:00
parent e7793cb1b3
commit 1296097809
1 changed files with 3 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
nixos/hosts/nuc-server/default.nix
View file

@ -1,6 +1,7 @@
{ inputs, config, lib, pkgs, modulesPath, desktop, username, platform, ... }: { { inputs, config, lib, pkgs, modulesPath, hostname, username, platform, ... }: {
imports = [ imports = [
(modulesPath + "/installer/scan/not-detected.nix") (modulesPath + "/installer/scan/not-detected.nix")
../../common/services/tailscale-autoconnect.nix
../../common/modules/secureboot.nix ../../common/modules/secureboot.nix
../../common/modules/ssh-luks.nix ../../common/modules/ssh-luks.nix
../../common/services/podman.nix ../../common/services/podman.nix
@ -33,23 +34,9 @@
networking.hostName = "nuc-server"; networking.hostName = "nuc-server";
networking.firewall.allowedTCPPorts = [ 22 ]; networking.firewall.allowedTCPPorts = [ 22 ];
# Generic Tailscale configs are in /nixos/common/services/tailscale.nix
# Set up the secrets file:
sops.secrets."tailscale_keys/nuc-server" = {
owner = "root";
sopsFile = ../../../secrets/tailscale.yaml;
restartUnits = [
"tailscaled.service"
"tailscaled-autoconnect.service"
];
};
services.tailscale.authKeyFile = "/run/secrets/tailscale_keys/nuc-server"; services.tailscale.authKeyFile = "/run/secrets/tailscale_keys/nuc-server";
services.tailscale.extraUpFlags = [ services.tailscale.extraUpFlags = [
"--advertise-exit-node" "--advertise-exit-node"
"--advertise-routes=10.2.0.0/24,192.168.1.13/32,192.168.1.14/32" "--advertise-routes=10.2.0.0/24,192.168.1.13/32,192.168.1.14/32"
]; ];
boot.kernel.sysctl = {
"net.ipv4.ip_forward" = true;
};
} }