diff options
author | tv <tv@shackspace.de> | 2015-07-27 02:02:34 +0200 |
---|---|---|
committer | tv <tv@shackspace.de> | 2015-07-27 02:02:34 +0200 |
commit | afb6afff1d0f81d8a0dcfd94fa8e46a849bb094f (patch) | |
tree | ebdbaf99b0e2fcde8be0bd43455955e5cd17b3be /tv/systems/mkdir.nix | |
parent | 45b173c11ecc7d6e8a177d7121bd06d923691b4b (diff) |
* tv -> tv *
Diffstat (limited to 'tv/systems/mkdir.nix')
-rw-r--r-- | tv/systems/mkdir.nix | 67 |
1 files changed, 67 insertions, 0 deletions
diff --git a/tv/systems/mkdir.nix b/tv/systems/mkdir.nix new file mode 100644 index 000000000..a88e9812e --- /dev/null +++ b/tv/systems/mkdir.nix @@ -0,0 +1,67 @@ +{ config, lib, pkgs, ... }: + +with lib; + +{ + krebs.build.host = config.krebs.hosts.mkdir; + + imports = [ + ../configs/CAC-Developer-1.nix + ../configs/CAC-CentOS-7-64bit.nix + ../configs/base.nix + ../configs/consul-server.nix + ../configs/exim-smarthost.nix + ../configs/git.nix + { + tv.iptables = { + enable = true; + input-internet-accept-new-tcp = [ + "ssh" + "tinc" + "smtp" + ]; + input-retiolum-accept-new-tcp = [ + "http" + ]; + }; + } + { + krebs.retiolum = { + enable = true; + connectTo = [ + "cd" + "fastpoke" + "pigstarter" + "ire" + ]; + }; + } + ]; + + networking.interfaces.enp2s1.ip4 = [ + { + address = "162.248.167.241"; # TODO + prefixLength = 24; + } + ]; + networking.defaultGateway = "162.248.167.1"; + networking.nameservers = [ + "8.8.8.8" + ]; + + environment.systemPackages = with pkgs; [ + git # required for ./deploy, clone_or_update + htop + iftop + iotop + iptables + nethogs + rxvt_unicode.terminfo + tcpdump + ]; + + services.journald.extraConfig = '' + SystemMaxUse=1G + RuntimeMaxUse=128M + ''; +} |