# NixOS configuration of losurdo.sourcephile.fr
# Domenico Losurdo (1941-2018), historian for the working class
# https://www.monde-diplomatique.fr/2018/10/FONDU/59128
{ inputs, ... }:
{
system = "x86_64-linux";
extraArgs = {
  ipv4 = "80.67.180.251";
  wireguard = rec {
    wg-intra = {
      ipv4 = "192.168.42.2";
      listenPort = 43642;
      #listenPort = null;
      persistentKeepalive = 25;
      peer = {
        publicKey = "xsFFep3k8z0pXgUOz4aryOF8l/KPBSOd4WQA26BkXy0=";
        allowedIPs = [ "${wg-intra.ipv4}/32" ];
      };
    };
  };
};
modules = [
  (inputs.nixpkgs + "/nixos/modules/profiles/hardened.nix")
  ../nixos/defaults.nix
  ../nixos/profiles/services/unbound.nix
  losurdo/acme.nix
  losurdo/debug.nix
  losurdo/fail2ban.nix
  losurdo/fileSystems.nix
  losurdo/hardware.nix
  losurdo/networking.nix
  losurdo/nginx.nix
  #losurdo/postgresql.nix
  losurdo/prosody.nix
  (inputs.secrets + "/machines/losurdo/prosody.nix")
  losurdo/sanoid.nix
  losurdo/security.nix
  losurdo/syncoid.nix
  losurdo/system.nix
  losurdo/transmission.nix
  losurdo/users.nix
  (inputs.secrets + "/machines/losurdo/users.nix")
];
}