49 lines
1.3 KiB
Nix
49 lines
1.3 KiB
Nix
{ config, pkgs, ... }:
|
|
let
|
|
shack-ip = config.krebs.build.host.nets.shack.ip4.addr;
|
|
in
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
<stockholm/krebs>
|
|
<stockholm/krebs/2configs>
|
|
# <stockholm/krebs/2configs/secret-passwords.nix>
|
|
|
|
# <stockholm/krebs/2configs/binary-cache/nixos.nix>
|
|
# <stockholm/krebs/2configs/binary-cache/prism.nix>
|
|
<stockholm/krebs/2configs/shack/ssh-keys.nix>
|
|
<stockholm/krebs/2configs/shack/prometheus/node.nix>
|
|
# provides access to /home/share for smbuser via smb
|
|
<stockholm/krebs/2configs/shack/share.nix>
|
|
{
|
|
fileSystems."/home/share" =
|
|
{ device = "/serve";
|
|
options = [ "bind" "nofail" ];
|
|
};
|
|
}
|
|
|
|
## Collect local statistics via collectd and send to collectd
|
|
<stockholm/krebs/2configs/stats/shack-client.nix>
|
|
<stockholm/krebs/2configs/stats/shack-debugging.nix>
|
|
];
|
|
|
|
krebs.build.host = config.krebs.hosts.filebitch;
|
|
sound.enable = false;
|
|
|
|
services.udev.extraRules = ''
|
|
SUBSYSTEM=="net", ATTR{address}=="60:a4:4c:3d:52:cf", NAME="et0"
|
|
'';
|
|
networking = {
|
|
firewall.enable = true;
|
|
interfaces.et0.ipv4.addresses = [
|
|
{
|
|
address = shack-ip;
|
|
prefixLength = 20;
|
|
}
|
|
];
|
|
|
|
defaultGateway = "10.42.0.1";
|
|
nameservers = [ "10.42.0.100" "10.42.0.200" ];
|
|
};
|
|
}
|