2015-10-30 15:05:51 +00:00
{ config , lib , pkgs , . . . }:
2016-07-07 21:07:22 +00:00
with config . krebs . lib ;
2015-10-30 15:05:51 +00:00
let
2016-04-08 01:53:34 +00:00
ip = config . krebs . build . host . nets . internet . ip4 . addr ;
2016-05-19 22:02:29 +00:00
2016-05-31 21:26:35 +00:00
inherit ( import <stockholm/lass/2configs/websites/util.nix> { inherit lib pkgs ; } )
manageCerts
;
2016-05-19 22:02:29 +00:00
2015-10-30 15:05:51 +00:00
in {
imports = [
2016-02-15 15:27:11 +00:00
../.
2016-04-15 12:39:03 +00:00
../2configs/default.nix
2016-04-12 13:17:42 +00:00
../2configs/exim-smarthost.nix
2015-10-30 15:05:51 +00:00
../2configs/downloading.nix
2015-11-01 18:58:59 +00:00
../2configs/ts3.nix
2015-11-09 01:27:22 +00:00
../2configs/bitlbee.nix
2015-11-13 13:57:51 +00:00
../2configs/weechat.nix
2016-04-15 14:15:22 +00:00
../2configs/privoxy-retiolum.nix
2016-05-21 11:49:31 +00:00
../2configs/radio.nix
2016-05-31 21:34:06 +00:00
../2configs/buildbot-standalone.nix
2016-06-24 13:35:47 +00:00
../2configs/repo-sync.nix
2016-06-25 16:56:39 +00:00
../2configs/binary-cache/server.nix
2016-05-31 22:06:49 +00:00
{
imports = [
../2configs/git.nix
] ;
2016-07-07 21:07:22 +00:00
krebs . nginx . servers . cgit = {
server-names = [
" c g i t . l a s s u l . u s "
] ;
locations = [
( nameValuePair " / . w e l l - k n o w n / a c m e - c h a l l e n g e " ''
root /var/lib/acme/challenges/cgit.lassul.us / ;
'' )
] ;
ssl = {
enable = true ;
certificate = " / v a r / l i b / a c m e / c g i t . l a s s u l . u s / f u l l c h a i n . p e m " ;
certificate_key = " / v a r / l i b / a c m e / c g i t . l a s s u l . u s / k e y . p e m " ;
} ;
} ;
2016-05-31 22:06:49 +00:00
}
2015-10-30 15:05:51 +00:00
{
users . extraGroups = {
# ● systemd-tmpfiles-setup.service - Create Volatile Files and Directories
# Loaded: loaded (/nix/store/2l33gg7nmncqkpysq9f5fxyhlw6ncm2j-systemd-217/example/systemd/system/systemd-tmpfiles-setup.service)
# Active: failed (Result: exit-code) since Mon 2015-03-16 10:29:18 UTC; 4s ago
# Docs: man:tmpfiles.d(5)
# man:systemd-tmpfiles(8)
# Process: 19272 ExecStart=/nix/store/2l33gg7nmncqkpysq9f5fxyhlw6ncm2j-systemd-217/bin/systemd-tmpfiles --create --remove --boot --exclude-prefix=/dev (code=exited, status=1/FAILURE)
# Main PID: 19272 (code=exited, status=1/FAILURE)
#
# Mar 16 10:29:17 cd systemd-tmpfiles[19272]: [/usr/lib/tmpfiles.d/legacy.conf:26] Unknown group 'lock'.
# Mar 16 10:29:18 cd systemd-tmpfiles[19272]: Two or more conflicting lines for /var/log/journal configured, ignoring.
# Mar 16 10:29:18 cd systemd-tmpfiles[19272]: Two or more conflicting lines for /var/log/journal/7b35116927d74ea58785e00b47ac0f0d configured, ignoring.
# Mar 16 10:29:18 cd systemd[1]: systemd-tmpfiles-setup.service: main process exited, code=exited, status=1/FAILURE
# Mar 16 10:29:18 cd systemd[1]: Failed to start Create Volatile Files and Directories.
# Mar 16 10:29:18 cd systemd[1]: Unit systemd-tmpfiles-setup.service entered failed state.
# Mar 16 10:29:18 cd systemd[1]: systemd-tmpfiles-setup.service failed.
# warning: error(s) occured while switching to the new configuration
lock . gid = 10001 ;
} ;
}
{
networking . interfaces . et0 . ip4 = [
{
address = ip ;
prefixLength = 24 ;
}
] ;
networking . defaultGateway = " 2 1 3 . 2 3 9 . 2 0 5 . 2 2 5 " ;
networking . nameservers = [
" 8 . 8 . 8 . 8 "
] ;
services . udev . extraRules = ''
SUBSYSTEM == " n e t " , ATTR { address } == " 5 4 : 0 4 : a 6 : 7 e : f 4 : 0 6 " , NAME = " e t 0 "
'' ;
}
{
boot . loader . grub = {
devices = [
" / d e v / s d a "
" / d e v / s d b "
] ;
splashImage = null ;
} ;
boot . initrd . availableKernelModules = [
" a t a _ p i i x "
" v m w _ p v s c s i "
] ;
fileSystems . " / " = {
device = " / d e v / p o o l / n i x " ;
fsType = " e x t 4 " ;
} ;
fileSystems . " / b o o t " = {
device = " / d e v / d i s k / b y - u u i d / 7 c a 1 2 d 8 c - 6 0 6 d - 4 1 c e - b 1 0 d - 6 2 b 6 5 4 e 5 0 e 3 6 " ;
} ;
fileSystems . " / v a r / d o w n l o a d " = {
device = " / d e v / p o o l / d o w n l o a d " ;
} ;
2016-04-11 14:43:52 +00:00
fileSystems . " / s r v / h t t p " = {
device = " / d e v / p o o l / h t t p " ;
} ;
fileSystems . " / s r v / o . u b i k m e d i a . d e - d a t a " = {
device = " / d e v / p o o l / o w n c l o u d - u b i k - d a t a " ;
} ;
fileSystems . " / b k u " = {
device = " / d e v / p o o l / b k u " ;
2016-04-08 22:18:51 +00:00
} ;
2015-10-30 15:05:51 +00:00
}
{
sound . enable = false ;
}
2015-11-01 19:00:43 +00:00
{
nixpkgs . config . allowUnfree = true ;
}
2015-11-09 01:33:30 +00:00
{
#stuff for juhulian
users . extraUsers . juhulian = {
name = " j u h u l i a n " ;
uid = 1339 ;
home = " / h o m e / j u h u l i a n " ;
group = " u s e r s " ;
createHome = true ;
useDefaultShell = true ;
extraGroups = [
] ;
openssh . authorizedKeys . keys = [
" s s h - r s a A A A A B 3 N z a C 1 y c 2 E A A A A D A Q A B A A A B A Q D B Q h L G v f v 4 h y Q / n q J G y 1 Y g H X P S V l 6 i g e W T r o J S v A h U F g o h + r G + z v q Y 0 E a h K X N b 3 s q 0 / O Y D C T J V u u c c 0 h g C g 7 T 2 K q T q M t T b 9 E E k R m C F b D 7 F 7 D W Z o j C r h / a n 6 s H n e q T 5 e F v z A P Z 8 E 5 h u p 7 o V Q n j 5 P 5 M 3 I 9 k e R H B W t 1 r q 6 q 0 I c O E h s F v n e 4 q J c 7 3 a L A S T J k x z l o 5 U 8 j u 3 J Q O l 6 4 7 4 E C u S n 0 l b 1 f T r Q / S R 1 N g F 7 j V 1 1 e B l d k S 8 S H E B + 2 G X j n 4 Y r n + Q U K O n D p + B 8 5 v Z m V l J S I + 7 X R 1 / U / x I b t A j G T E m N w B 6 c T b B v 9 N C G 9 j l o D D O Z G 4 Z v z z H Y r l B X j a i g t Q h 2 / 4 m r H o K a 5 e V j u h u l i a n @ j u h u l i a n "
] ;
} ;
krebs . iptables . tables . filter . INPUT . rules = [
{ predicate = " - p u d p - - d p o r t 6 0 0 0 0 : 6 1 0 0 0 " ; target = " A C C E P T " ; }
] ;
}
2015-11-13 00:06:16 +00:00
{
environment . systemPackages = [
pkgs . perlPackages . Plack
] ;
krebs . iptables . tables . filter . INPUT . rules = [
{ predicate = " - p t c p - - d p o r t 8 0 8 0 " ; target = " A C C E P T " ; }
] ;
}
2015-12-12 16:58:21 +00:00
{
users . users . chat . openssh . authorizedKeys . keys = [
2016-04-08 22:36:22 +00:00
" e c d s a - s h a 2 - n i s t p 3 8 4 A A A A E 2 V j Z H N h L X N o Y T I t b m l z d H A z O D Q A A A A I b m l z d H A z O D Q A A A B h B B Q j n / 3 n 2 8 3 R Z k B s 2 C F q b p u k y Q 3 z k L I j e w R p K t t P a 5 d 4 P U i T 7 / v O l u t W H 5 E P 4 B x X Q S o e Z S t x 8 D 2 a l G j x f K + n f D v R J G G o f p m 2 3 c N 4 j 4 i 2 4 F c a m 1 y 1 H 7 w q R X O 1 q b z 5 A B 3 q P g = = J u i c e S S H "
2016-02-21 13:26:21 +00:00
config . krebs . users . lass-uriel . pubkey
2015-12-12 16:58:21 +00:00
] ;
}
2015-12-12 16:58:58 +00:00
{
time . timeZone = " E u r o p e / B e r l i n " ;
}
2015-12-12 17:22:47 +00:00
{
imports = [
../2configs/websites/wohnprojekt-rhh.de.nix
../2configs/websites/domsen.nix
] ;
krebs . iptables . tables . filter . INPUT . rules = [
2016-04-08 22:36:38 +00:00
{ predicate = " - p t c p - - d p o r t h t t p " ; target = " A C C E P T " ; }
{ predicate = " - p t c p - - d p o r t h t t p s " ; target = " A C C E P T " ; }
2015-12-12 17:22:47 +00:00
] ;
}
2016-03-06 00:45:57 +00:00
{
services . tor = {
enable = true ;
} ;
}
2016-05-19 22:02:29 +00:00
{
security . acme = {
certs . " l a s s u l . u s " = {
email = " l a s s @ l a s s u l . u s " ;
webroot = " / v a r / l i b / a c m e / c h a l l e n g e s / l a s s u l . u s " ;
plugins = [
" a c c o u n t _ k e y . j s o n "
" k e y . p e m "
" f u l l c h a i n . p e m "
" f u l l . p e m "
] ;
user = " e j a b b e r d " ;
} ;
} ;
krebs . nginx . servers . " l a s s u l . u s " = {
server-names = [ " l a s s u l . u s " ] ;
locations = [
( lib . nameValuePair " / . w e l l - k n o w n / a c m e - c h a l l e n g e " ''
root /var/lib/acme/challenges/lassul.us / ;
'' )
] ;
} ;
lass . ejabberd = {
enable = true ;
hosts = [ " l a s s u l . u s " ] ;
} ;
krebs . iptables . tables . filter . INPUT . rules = [
{ predicate = " - p t c p - - d p o r t x m p p - c l i e n t " ; target = " A C C E P T " ; }
{ predicate = " - p t c p - - d p o r t x m p p - s e r v e r " ; target = " A C C E P T " ; }
] ;
}
2016-05-24 21:55:11 +00:00
{
imports = [
2016-06-25 16:38:30 +00:00
../2configs/realwallpaper.nix
2016-05-24 21:55:11 +00:00
] ;
krebs . nginx . servers . " l a s s u l . u s " . locations = [
( lib . nameValuePair " / w a l l p a p e r . p n g " ''
alias /tmp/wallpaper.png ;
'' )
] ;
}
2016-07-08 11:42:12 +00:00
{
environment . systemPackages = with pkgs ; [
mk_sql_pair
] ;
}
2015-10-30 15:05:51 +00:00
] ;
krebs . build . host = config . krebs . hosts . prism ;
}
