tweaked server config
This commit is contained in:
@@ -1,15 +1,23 @@
|
||||
{ pkgs, username, ... }: {
|
||||
imports = [ ./hardware.nix ./home.nix ];
|
||||
imports = [ ./hardware.nix ];
|
||||
movOpts = {
|
||||
nixSettings.enable = true;
|
||||
networkModule.enable = true;
|
||||
bootLoader.enable = true;
|
||||
issue.enable = true;
|
||||
sysPkgs.enable = true;
|
||||
sysProgs.enable = true;
|
||||
sysServices.enable = true;
|
||||
jellyfinConfig.enable = true;
|
||||
caddyConfig.enable = true;
|
||||
sysEnv = {
|
||||
nixSettings.enable = true;
|
||||
issue.enable = true;
|
||||
};
|
||||
hardwareCfg = {
|
||||
networkModule.enable = true;
|
||||
bootLoader.enable = true;
|
||||
};
|
||||
softwareCfg = {
|
||||
sysPkgs.enable = true;
|
||||
sysProgs.enable = true;
|
||||
sysServices.enable = true;
|
||||
};
|
||||
serverCfg = {
|
||||
jellyfinConfig.enable = true;
|
||||
caddyConfig.enable = true;
|
||||
};
|
||||
};
|
||||
networking.firewall = { allowedTCPPorts = [ 443 8920 ]; };
|
||||
environment = {
|
||||
@@ -22,4 +30,23 @@
|
||||
};
|
||||
shells = with pkgs; [ zsh bash ];
|
||||
};
|
||||
|
||||
users = {
|
||||
groups.persist = { };
|
||||
users = {
|
||||
root.initialPassword = "1234";
|
||||
${username} = {
|
||||
isNormalUser = true;
|
||||
initialPassword = "1234";
|
||||
shell = pkgs.zsh;
|
||||
extraGroups = [ "wheel" "persist" "libvirtd" ];
|
||||
};
|
||||
};
|
||||
};
|
||||
security.sudo.extraConfig = ''
|
||||
${username} ALL=(ALL) NOPASSWD: /etc/profiles/per-user/${username}/bin/rebuild
|
||||
'';
|
||||
nix.settings.allowed-users = [ "${username}" ];
|
||||
|
||||
time.timeZone = "America/New_York";
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user