@@ -1,27 +1,27 @@
|
||||
{
|
||||
pkgs,
|
||||
user,
|
||||
...
|
||||
pkgs,
|
||||
user,
|
||||
...
|
||||
}: {
|
||||
imports = [
|
||||
../../modules/darwin
|
||||
];
|
||||
imports = [
|
||||
../../modules/darwin
|
||||
];
|
||||
|
||||
networking.hostName = "chidi";
|
||||
networking.computerName = "Chidi";
|
||||
networking.hostName = "chidi";
|
||||
networking.computerName = "Chidi";
|
||||
|
||||
services.syncthing.settings.folders = {
|
||||
"Projects/Work" = {
|
||||
path = "/Users/${user}/Projects/Work";
|
||||
devices = ["tahani" "chidi"];
|
||||
};
|
||||
};
|
||||
services.syncthing.settings.folders = {
|
||||
"Projects/Work" = {
|
||||
path = "/Users/${user}/Projects/Work";
|
||||
devices = ["tahani" "chidi"];
|
||||
};
|
||||
};
|
||||
|
||||
home-manager.users.${user} = {
|
||||
programs.git.settings.user.email = "christoph@tuist.dev";
|
||||
};
|
||||
home-manager.users.${user} = {
|
||||
programs.git.settings.user.email = "christoph@tuist.dev";
|
||||
};
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
slack
|
||||
];
|
||||
environment.systemPackages = with pkgs; [
|
||||
slack
|
||||
];
|
||||
}
|
||||
|
||||
@@ -1,36 +1,36 @@
|
||||
{user, ...}: {
|
||||
imports = [
|
||||
../../modules/darwin
|
||||
];
|
||||
imports = [
|
||||
../../modules/darwin
|
||||
];
|
||||
|
||||
networking.hostName = "jason";
|
||||
networking.computerName = "Jason";
|
||||
networking.hostName = "jason";
|
||||
networking.computerName = "Jason";
|
||||
|
||||
services.syncthing.settings.folders = {
|
||||
"Projects/Personal" = {
|
||||
path = "/Users/${user}/Projects/Personal";
|
||||
devices = ["jason" "jason"];
|
||||
};
|
||||
};
|
||||
services.syncthing.settings.folders = {
|
||||
"Projects/Personal" = {
|
||||
path = "/Users/${user}/Projects/Personal";
|
||||
devices = ["jason" "jason"];
|
||||
};
|
||||
};
|
||||
|
||||
sops.age.keyFile = "/Users/${user}/.config/sops/age/keys.txt";
|
||||
sops.age.keyFile = "/Users/${user}/.config/sops/age/keys.txt";
|
||||
|
||||
sops.secrets = {
|
||||
jason-syncthing-cert = {
|
||||
sopsFile = ../../secrets/jason-syncthing-cert;
|
||||
format = "binary";
|
||||
owner = user;
|
||||
path = "/Users/${user}/.config/syncthing/cert.pem";
|
||||
};
|
||||
jason-syncthing-key = {
|
||||
sopsFile = ../../secrets/jason-syncthing-key;
|
||||
format = "binary";
|
||||
owner = user;
|
||||
path = "/Users/${user}/.config/syncthing/key.pem";
|
||||
};
|
||||
};
|
||||
sops.secrets = {
|
||||
jason-syncthing-cert = {
|
||||
sopsFile = ../../secrets/jason-syncthing-cert;
|
||||
format = "binary";
|
||||
owner = user;
|
||||
path = "/Users/${user}/.config/syncthing/cert.pem";
|
||||
};
|
||||
jason-syncthing-key = {
|
||||
sopsFile = ../../secrets/jason-syncthing-key;
|
||||
format = "binary";
|
||||
owner = user;
|
||||
path = "/Users/${user}/.config/syncthing/key.pem";
|
||||
};
|
||||
};
|
||||
|
||||
home-manager.users.${user} = {
|
||||
programs.git.settings.user.email = "christoph@schmatzler.com";
|
||||
};
|
||||
home-manager.users.${user} = {
|
||||
programs.git.settings.user.email = "christoph@schmatzler.com";
|
||||
};
|
||||
}
|
||||
|
||||
@@ -1,102 +1,102 @@
|
||||
{
|
||||
config,
|
||||
hostname,
|
||||
user,
|
||||
...
|
||||
config,
|
||||
hostname,
|
||||
user,
|
||||
...
|
||||
}: {
|
||||
imports = [
|
||||
../../modules/nixos
|
||||
];
|
||||
imports = [
|
||||
../../modules/nixos
|
||||
];
|
||||
|
||||
services.adguardhome = {
|
||||
enable = true;
|
||||
port = 10000;
|
||||
settings = {
|
||||
dns = {
|
||||
upstream_dns = [
|
||||
"1.1.1.1"
|
||||
"1.0.0.1"
|
||||
];
|
||||
};
|
||||
filtering = {
|
||||
protection_enabled = true;
|
||||
filtering_enabled = true;
|
||||
safe_search = {
|
||||
enabled = false;
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
services.adguardhome = {
|
||||
enable = true;
|
||||
port = 10000;
|
||||
settings = {
|
||||
dns = {
|
||||
upstream_dns = [
|
||||
"1.1.1.1"
|
||||
"1.0.0.1"
|
||||
];
|
||||
};
|
||||
filtering = {
|
||||
protection_enabled = true;
|
||||
filtering_enabled = true;
|
||||
safe_search = {
|
||||
enabled = false;
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
virtualisation.docker = {
|
||||
enable = true;
|
||||
};
|
||||
virtualisation.docker = {
|
||||
enable = true;
|
||||
};
|
||||
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
settings = {
|
||||
PermitRootLogin = "yes";
|
||||
PasswordAuthentication = false;
|
||||
};
|
||||
};
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
settings = {
|
||||
PermitRootLogin = "yes";
|
||||
PasswordAuthentication = false;
|
||||
};
|
||||
};
|
||||
|
||||
fileSystems."/" = {
|
||||
device = "/dev/disk/by-label/NIXROOT";
|
||||
fsType = "ext4";
|
||||
};
|
||||
fileSystems."/" = {
|
||||
device = "/dev/disk/by-label/NIXROOT";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
fileSystems."/boot" = {
|
||||
device = "/dev/disk/by-label/NIXBOOT";
|
||||
fsType = "vfat";
|
||||
};
|
||||
fileSystems."/boot" = {
|
||||
device = "/dev/disk/by-label/NIXBOOT";
|
||||
fsType = "vfat";
|
||||
};
|
||||
|
||||
networking = {
|
||||
hostName = hostname;
|
||||
useDHCP = false;
|
||||
interfaces.eno1.ipv4.addresses = [
|
||||
{
|
||||
address = "192.168.1.10";
|
||||
prefixLength = 24;
|
||||
}
|
||||
];
|
||||
defaultGateway = "192.168.1.1";
|
||||
nameservers = ["1.1.1.1"];
|
||||
firewall = {
|
||||
enable = true;
|
||||
trustedInterfaces = ["eno1" "tailscale0"];
|
||||
allowedUDPPorts = [config.services.tailscale.port];
|
||||
allowedTCPPorts = [22];
|
||||
checkReversePath = "loose";
|
||||
};
|
||||
};
|
||||
networking = {
|
||||
hostName = hostname;
|
||||
useDHCP = false;
|
||||
interfaces.eno1.ipv4.addresses = [
|
||||
{
|
||||
address = "192.168.1.10";
|
||||
prefixLength = 24;
|
||||
}
|
||||
];
|
||||
defaultGateway = "192.168.1.1";
|
||||
nameservers = ["1.1.1.1"];
|
||||
firewall = {
|
||||
enable = true;
|
||||
trustedInterfaces = ["eno1" "tailscale0"];
|
||||
allowedUDPPorts = [config.services.tailscale.port];
|
||||
allowedTCPPorts = [22];
|
||||
checkReversePath = "loose";
|
||||
};
|
||||
};
|
||||
|
||||
sops.secrets = {
|
||||
tahani-syncthing-cert = {
|
||||
sopsFile = ../../secrets/tahani-syncthing-cert;
|
||||
format = "binary";
|
||||
owner = user;
|
||||
path = "/home/${user}/.config/syncthing/cert.pem";
|
||||
};
|
||||
tahani-syncthing-key = {
|
||||
sopsFile = ../../secrets/tahani-syncthing-key;
|
||||
format = "binary";
|
||||
owner = user;
|
||||
path = "/home/${user}/.config/syncthing/key.pem";
|
||||
};
|
||||
};
|
||||
sops.secrets = {
|
||||
tahani-syncthing-cert = {
|
||||
sopsFile = ../../secrets/tahani-syncthing-cert;
|
||||
format = "binary";
|
||||
owner = user;
|
||||
path = "/home/${user}/.config/syncthing/cert.pem";
|
||||
};
|
||||
tahani-syncthing-key = {
|
||||
sopsFile = ../../secrets/tahani-syncthing-key;
|
||||
format = "binary";
|
||||
owner = user;
|
||||
path = "/home/${user}/.config/syncthing/key.pem";
|
||||
};
|
||||
};
|
||||
|
||||
services.syncthing.settings.folders = {
|
||||
"Projects/Personal" = {
|
||||
path = "/home/${user}/Projects/Personal";
|
||||
devices = ["tahani" "jason"];
|
||||
};
|
||||
"Projects/Work" = {
|
||||
path = "/home/${user}/Projects/Work";
|
||||
devices = ["tahani" "chidi"];
|
||||
};
|
||||
};
|
||||
services.syncthing.settings.folders = {
|
||||
"Projects/Personal" = {
|
||||
path = "/home/${user}/Projects/Personal";
|
||||
devices = ["tahani" "jason"];
|
||||
};
|
||||
"Projects/Work" = {
|
||||
path = "/home/${user}/Projects/Work";
|
||||
devices = ["tahani" "chidi"];
|
||||
};
|
||||
};
|
||||
|
||||
home-manager.users.${user} = {
|
||||
programs.git.settings.user.email = "christoph@schmatzler.com";
|
||||
};
|
||||
home-manager.users.${user} = {
|
||||
programs.git.settings.user.email = "christoph@schmatzler.com";
|
||||
};
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user