41 lines
1.0 KiB
Nix
41 lines
1.0 KiB
Nix
{ ... }: {
|
|
imports = [
|
|
./akkoma.nix
|
|
./hardware-configuration.nix
|
|
];
|
|
|
|
boot.cleanTmpDir = true;
|
|
zramSwap.enable = true;
|
|
networking.hostName = "akko";
|
|
services.openssh.enable = true;
|
|
users.users.root.openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM6NPbPIcCTzeEsjyx0goWyj6fr2qzcfKCCdOUqg0N/v cadey@kos-mos"
|
|
];
|
|
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
|
networking.firewall.allowedUDPPorts = [ 80 443 ];
|
|
networking.firewall.trustedInterfaces = [ "tailscale0" ];
|
|
networking.firewall.checkReversePath = "loose";
|
|
|
|
services.tailscale.enable = true;
|
|
|
|
services.postgresql = {
|
|
authentication = ''
|
|
host replication replication 100.64.0.0/10 md5
|
|
'';
|
|
enableTCPIP = true;
|
|
};
|
|
|
|
security.acme.acceptTerms = true;
|
|
|
|
services.nginx = {
|
|
enable = true;
|
|
|
|
clientMaxBodySize = "128m";
|
|
recommendedTlsSettings = true;
|
|
recommendedOptimisation = true;
|
|
recommendedGzipSettings = true;
|
|
};
|
|
}
|