server: do stuff
This commit is contained in:
@@ -1,84 +1,109 @@
|
||||
{ config, pkgs, lib, ... }:
|
||||
{
|
||||
config,
|
||||
pkgs,
|
||||
lib,
|
||||
...
|
||||
}:
|
||||
|
||||
{
|
||||
imports = [
|
||||
./modules/atproto-pds.nix
|
||||
./modules/cloudflare.nix
|
||||
./modules/tangled.nix
|
||||
../../modules/force.nix
|
||||
];
|
||||
imports = [
|
||||
./modules/atproto-pds.nix
|
||||
./modules/cloudflare.nix
|
||||
./modules/tangled.nix
|
||||
../../modules/force.nix
|
||||
./modules/gitea.nix
|
||||
./modules/spacebar.nix
|
||||
];
|
||||
|
||||
# gcc. shit breaks. wtf
|
||||
environment.sessionVariables.LD_LIBRARY_PATH = "${pkgs.gcc15}/lib";
|
||||
# gcc. shit breaks. wtf
|
||||
environment.sessionVariables.LD_LIBRARY_PATH = "${pkgs.gcc15}/lib";
|
||||
|
||||
services.vscode-server.enable = true;
|
||||
services.vscode-server.enable = true;
|
||||
|
||||
systemd.services.ocbwoy3-start-pm2 = {
|
||||
enable = true;
|
||||
description = "Start PM2";
|
||||
after = [ "network.target" ];
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
serviceConfig = {
|
||||
Type = "forking";
|
||||
User = "ocbwoy3";
|
||||
LimitNOFILE = "infinity";
|
||||
LimitNPROC = "infinity";
|
||||
LimitCORE = "infinity";
|
||||
Environment = "PM2_HOME=/home/ocbwoy3/.pm2";
|
||||
PIDFile = "/home/ocbwoy3/.pm2/pm2.pid";
|
||||
Restart = "on-failure";
|
||||
systemd.services.ocbwoy3-start-pm2 = {
|
||||
enable = true;
|
||||
description = "Start PM2";
|
||||
after = [ "network.target" ];
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
serviceConfig = {
|
||||
Type = "forking";
|
||||
User = "ocbwoy3";
|
||||
LimitNOFILE = "infinity";
|
||||
LimitNPROC = "infinity";
|
||||
LimitCORE = "infinity";
|
||||
Environment = "PM2_HOME=/home/ocbwoy3/.pm2";
|
||||
PIDFile = "/home/ocbwoy3/.pm2/pm2.pid";
|
||||
Restart = "on-failure";
|
||||
|
||||
ExecStart = "${pkgs.pm2}/bin/pm2 resurrect";
|
||||
ExecReload = "${pkgs.pm2}/bin/pm2 reload all";
|
||||
ExecStop = "${pkgs.pm2}/bin/pm2 kill";
|
||||
};
|
||||
};
|
||||
ExecStart = "${pkgs.pm2}/bin/pm2 resurrect";
|
||||
ExecReload = "${pkgs.pm2}/bin/pm2 reload all";
|
||||
ExecStop = "${pkgs.pm2}/bin/pm2 kill";
|
||||
};
|
||||
};
|
||||
|
||||
services.openssh.settings = {
|
||||
PubkeyAuthentication = "yes";
|
||||
TrustedUserCAKeys = "/etc/ssh/ca.pub";
|
||||
};
|
||||
services.openssh.settings = {
|
||||
PubkeyAuthentication = "yes";
|
||||
TrustedUserCAKeys = "/etc/ssh/ca.pub";
|
||||
};
|
||||
|
||||
services.openssh = {
|
||||
enable = lib.mkForce true;
|
||||
};
|
||||
services.openssh = {
|
||||
enable = lib.mkForce true;
|
||||
};
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
fastfetch
|
||||
hyfetch
|
||||
pm2
|
||||
steam-run
|
||||
];
|
||||
environment.systemPackages = with pkgs; [
|
||||
fastfetch
|
||||
hyfetch
|
||||
pm2
|
||||
steam-run
|
||||
];
|
||||
|
||||
users.users.ocbwoy3 = {
|
||||
initialPassword = "thisisapassword42069!"; # not the type passwords i use
|
||||
isNormalUser = true;
|
||||
extraGroups = [ "wheel" "networkmanager" ];
|
||||
shell = pkgs.zsh;
|
||||
};
|
||||
users.users.ocbwoy3 = {
|
||||
initialPassword = "thisisapassword42069!"; # not the type passwords i use
|
||||
isNormalUser = true;
|
||||
extraGroups = [
|
||||
"wheel"
|
||||
"networkmanager"
|
||||
];
|
||||
shell = pkgs.zsh;
|
||||
};
|
||||
|
||||
virtualisation.docker.enable = true;
|
||||
virtualisation.docker.enable = true;
|
||||
|
||||
services.mongodb = {
|
||||
enable = true;
|
||||
enableAuth = false;
|
||||
package = pkgs.mongodb-ce;
|
||||
replSetName = "rs0"; # dangerous
|
||||
bind_ip = "0.0.0.0";
|
||||
};
|
||||
services.mongodb = {
|
||||
enable = true;
|
||||
enableAuth = false;
|
||||
package = pkgs.mongodb-ce;
|
||||
replSetName = "rs0"; # dangerous
|
||||
bind_ip = "0.0.0.0";
|
||||
};
|
||||
|
||||
networking.firewall = {
|
||||
enable = true;
|
||||
allowedTCPPorts = [ 22 443 3000 3001 8080 25565 ];
|
||||
allowedUDPPorts = [ 22 443 3000 3001 8080 25565 ];
|
||||
};
|
||||
networking.firewall = {
|
||||
enable = true;
|
||||
allowedTCPPorts = [
|
||||
22
|
||||
443
|
||||
3000
|
||||
3001
|
||||
8080
|
||||
25565
|
||||
];
|
||||
allowedUDPPorts = [
|
||||
22
|
||||
443
|
||||
3000
|
||||
3001
|
||||
8080
|
||||
25565
|
||||
];
|
||||
};
|
||||
|
||||
catppuccin = {
|
||||
enable = true;
|
||||
flavor = "mocha";
|
||||
accent = "blue";
|
||||
};
|
||||
catppuccin = {
|
||||
enable = true;
|
||||
flavor = "mocha";
|
||||
accent = "blue";
|
||||
gitea.enable = false;
|
||||
};
|
||||
|
||||
system.stateVersion = "23.05"; # DO NOT TOUCH
|
||||
system.stateVersion = "23.05"; # DO NOT TOUCH
|
||||
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user