Adds config for vps

2025-03-19 20:27:48 +01:00 · 2025-03-19 20:27:48 +01:00 · b861379713
commit b861379713
parent 81d9b63e82
3 changed files with 177 additions and 0 deletions
--- a/hosts/dnsc-vps-sm/default.nix
+++ b/hosts/dnsc-vps-sm/default.nix
@ -0,0 +1,136 @@
+{
+  inputs,
+  outputs,
+  lib,
+  config,
+  pkgs,
+  ...
+}: {
+  imports = [
+    ./hardware-configuration.nix
+    ./networking.nix
+    inputs.home-manager.nixosModules.home-manager
+  ];
+
+  # Generated automatically
+  boot.tmp.cleanOnBoot = true;
+  zramSwap.enable = true;
+
+  # General
+  time.timeZone = "Europe/Berlin";
+  i18n.defaultLocale = "en_US.UTF-8";
+
+  # Boot
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.loader.systemd-boot.configurationLimit = 10;
+
+  # Nix Settings
+  # Perform garbage collection weekly to maintain low disk usage
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    options = "--delete-older-than 1w";
+  };
+  nix.settings.auto-optimise-store = true;
+
+  # Networking
+  networking.hostName = "dnsc-vps-sm";
+  networking.hostId = "380f585f";
+  networking.domain = "dnsc.io";
+  networking.networkmanager.enable = true;
+  # Fix due to https://github.com/NixOS/nixpkgs/issues/180175
+  systemd.services.NetworkManager-wait-online.enable = false;
+
+  # Firewall
+  networking.firewall.enable = true;
+  networking.firewall.allowedTCPPorts = [
+    80 
+    443
+  ];
+
+  # My user account
+  users.users.dennis = {
+    description = "dennis";
+    isNormalUser = true;
+    extraGroups = [ "wheel" "networkmanager" ];
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILvXWZOPOJJDAoF+Sx/ZLoAVu6G/7/MAWoknBgMAzjul dennis@dnsc-mac"
+    ];
+  };
+
+  # Home Manager Setup
+  home-manager = {
+    extraSpecialArgs = { inherit inputs outputs; };
+    users = {
+      dennis = import ../../home/server.nix;
+    };
+  };
+
+  # Enable new Nix CLI and flakes
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+  # Install system wide packages
+  environment.systemPackages = with pkgs; [
+    git
+    btop
+    neovim
+    wget
+  ];
+
+  # Programs
+  # GnuPG
+  programs.gnupg.agent = {
+    enable = true;
+    enableSSHSupport = true;
+  };
+
+  # Services
+  # SSH
+  services.openssh = {
+    enable = true;
+    settings = {
+      X11Forwarding = false;
+      PermitRootLogin = "no";
+      PasswordAuthentication = false;
+    };
+    openFirewall = true;
+  };
+
+  # Tailscale
+  services.tailscale.enable = true;
+
+  # Caddy
+  services.caddy = {
+    enable = true;
+    virtualHosts."www.dnsc.io".extraConfig = ''
+      redir https://example.com{uri}
+    '';
+    virtualHosts."dnsc.io".extraConfig = ''
+      encode gzip
+      file_server
+
+      root * /var/www/homepage
+    '';
+    virtualHosts."slides.dnsc.io".extraConfig = ''
+      encode gzip
+      file_server
+
+      root * /var/www/slides
+    '';
+  };
+
+  # Environment variables
+  environment.variables.EDITOR = "nvim";
+
+  # Copy the NixOS configuration file and link it from the resulting system
+  # (/run/current-system/configuration.nix). This is useful in case you
+  # accidentally delete configuration.nix.
+  # system.copySystemConfiguration = true;
+
+  # Do NOT change this value unless you have manually inspected all the changes it would make to your configuration,
+  # and migrated your data accordingly.
+  # For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
+  system.stateVersion = "23.11";
+}
+