93 lines
2 KiB
Nix
93 lines
2 KiB
Nix
{
|
|
pkgs,
|
|
lib,
|
|
config,
|
|
...
|
|
}:
|
|
|
|
{
|
|
imports = [
|
|
./hardware-configurations.nix
|
|
./services/gotosocial.nix
|
|
./services/synapse.nix
|
|
./services/restic.nix
|
|
./services/miniflux.nix
|
|
./services/hedgedoc.nix
|
|
./services/forgejo.nix
|
|
./services/vaultwarden.nix
|
|
];
|
|
|
|
networking.hostName = "biotite";
|
|
networking.useNetworkd = true;
|
|
systemd.network.enable = true;
|
|
systemd.network.networks."10-wan" = {
|
|
matchConfig.MACAddress = "b6:20:0d:9a:6c:34";
|
|
networkConfig = {
|
|
DHCP = "ipv4";
|
|
IPv6SendRA = true;
|
|
};
|
|
address = [ "2a03:4000:4a:148::1/64" ];
|
|
};
|
|
|
|
networking.firewall.allowedTCPPorts = [
|
|
80
|
|
443
|
|
];
|
|
|
|
commonSettings = {
|
|
auth.enable = true;
|
|
};
|
|
|
|
custom.monitoring = {
|
|
promtail.enable = true;
|
|
};
|
|
|
|
custom.prometheus.exporters = {
|
|
enable = true;
|
|
};
|
|
|
|
services.tailscale.enable = true;
|
|
|
|
services.caddy.enable = true;
|
|
|
|
sops = {
|
|
defaultSopsFile = ./secrets.yaml;
|
|
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
|
};
|
|
|
|
services.postgresql = {
|
|
enable = true;
|
|
package = pkgs.postgresql_17;
|
|
settings = {
|
|
allow_alter_system = false;
|
|
# DB Version: 17
|
|
# OS Type: linux
|
|
# DB Type: mixed
|
|
# Total Memory (RAM): 8 GB
|
|
# CPUs num: 4
|
|
# Data Storage: ssd
|
|
max_connections = 100;
|
|
shared_buffers = "2GB";
|
|
effective_cache_size = "6GB";
|
|
maintenance_work_mem = "512MB";
|
|
checkpoint_completion_target = 0.9;
|
|
wal_buffers = "16MB";
|
|
default_statistics_target = 100;
|
|
random_page_cost = 1.1;
|
|
effective_io_concurrency = 200;
|
|
work_mem = "5242kB";
|
|
huge_pages = "off";
|
|
min_wal_size = "1GB";
|
|
max_wal_size = "4GB";
|
|
max_worker_processes = 4;
|
|
max_parallel_workers_per_gather = 2;
|
|
max_parallel_workers = 4;
|
|
max_parallel_maintenance_workers = 2;
|
|
};
|
|
};
|
|
|
|
users.users.root.hashedPassword = "$y$j9T$NToEZWJBONjSgRnMd9Ur9/$o6n7a9b8eUILQz4d37oiHCCVnDJ8hZTZt.c.37zFfU.";
|
|
|
|
system.stateVersion = "24.11";
|
|
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
|
}
|