]> Git — Sourcephile - sourcephile-nix.git/blob - machines/mermet.nix
wireguard: setup in initrd
[sourcephile-nix.git] / machines / mermet.nix
1 # NixOS configuration of mermet.sourcephile.fr
2 #
3 # Show configuration options with, for example:
4 # nix-instantiate machines/mermet.nix --eval -A config.networking.hostName
5 # or:
6 # nix eval machines.mermet.networking.hostName
7 # Install/upgrade with:
8 # nix run config.installer.ssh-nixos -f machines/mermet.nix
9 # or:
10 # nix run machines.mermet.installer.ssh-nixos
11 {
12 system = "x86_64-linux";
13 extraArgs = rec {
14 ipv4 = "80.67.180.129";
15 wireguard = rec {
16 wg-intranet = {
17 ipv4 = "192.168.42.1";
18 listenPort = 43642;
19 persistentKeepalive = null;
20 peer = {
21 publicKey = "XbTEP2X71LBTjmdmySdiOpQJ+uIomcXvg1aiQGUtWBI=";
22 allowedIPs = [ "${wg-intranet.ipv4}/32" ];
23 endpoint = "${ipv4}:${toString wg-intranet.listenPort}";
24 };
25 };
26 };
27 };
28 modules = [
29 ../nixos/defaults.nix
30 ../nixos/profiles/services/unbound.nix
31 mermet/acme.nix
32 mermet/croc.nix
33 mermet/debug.nix
34 mermet/dovecot.nix
35 mermet/fail2ban.nix
36 mermet/fileSystems.nix
37 mermet/gitolite.nix
38 mermet/hardware.nix
39 mermet/knot.nix
40 #mermet/mlmmj.nix
41 mermet/networking.nix
42 mermet/nginx.nix
43 mermet/openldap.nix
44 mermet/postfix.nix
45 mermet/public-inbox.nix
46 mermet/redis.nix
47 mermet/rspamd.nix
48 mermet/sanoid.nix
49 mermet/security.nix
50 #mermet/shorewall.nix
51 mermet/system.nix
52 mermet/users.nix
53 ];
54 }