From fa38155eec9563dc9dc620a77900d87b97443cfe Mon Sep 17 00:00:00 2001 From: makefu Date: Sat, 15 Jul 2017 18:57:16 +0200 Subject: ma: move systems to subdir, init source --- makefu/1systems/wry/config.nix | 54 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 54 insertions(+) create mode 100644 makefu/1systems/wry/config.nix (limited to 'makefu/1systems/wry') diff --git a/makefu/1systems/wry/config.nix b/makefu/1systems/wry/config.nix new file mode 100644 index 000000000..f5097bf40 --- /dev/null +++ b/makefu/1systems/wry/config.nix @@ -0,0 +1,54 @@ +{ config, lib, pkgs, ... }: + +with import ; +let + + external-ip = config.krebs.build.host.nets.internet.ip4.addr; + internal-ip = config.krebs.build.host.nets.retiolum.ip4.addr; +in { + imports = [ + ../. + # TODO: copy this config or move to krebs + ../2configs/hw/CAC.nix + ../2configs/fs/CAC-CentOS-7-64bit.nix + ../2configs/save-diskspace.nix + + # ../2configs/bepasty-dual.nix + + ../2configs/iodined.nix + ../2configs/backup.nix + + # other nginx + # ../2configs/nginx/euer.test.nix + + # collectd + ../2configs/stats/client.nix + ../2configs/logging/client.nix + + ../2configs/tinc/retiolum.nix + # ../2configs/torrent.nix + ]; + + krebs.build.host = config.krebs.hosts.wry; + + # prepare graphs + services.nginx.enable = true; + krebs.retiolum-bootstrap.enable = true; + + networking = { + firewall = { + allowPing = true; + logRefusedConnections = false; + allowedTCPPorts = [ 53 80 443 ]; + allowedUDPPorts = [ 655 53 ]; + }; + interfaces.enp2s1.ip4 = [{ + address = external-ip; + prefixLength = 24; + }]; + defaultGateway = "104.233.87.1"; + nameservers = [ "8.8.8.8" ]; + }; + + environment.systemPackages = [ pkgs.screen ]; +} -- cgit v1.2.3