69 lines
1.5 KiB
Nix
69 lines
1.5 KiB
Nix
{ pkgs, inputs, secretsDir, ...}:
|
|
{
|
|
imports = [
|
|
inputs.nix-wsl.nixosModules.wsl
|
|
../users/me/headless.nix
|
|
|
|
inputs.networkmanager.nixosModules.networkmanager
|
|
inputs.home-manager.nixosModules.home-manager
|
|
../common/all.nix
|
|
../common/nixos-headless.nix
|
|
];
|
|
|
|
wsl.enable = true;
|
|
|
|
services.openssh = {
|
|
enable = true;
|
|
ports = [ 2222 ];
|
|
|
|
settings.PasswordAuthentication = false;
|
|
settings.KbdInteractiveAuthentication = false;
|
|
};
|
|
|
|
programs.bash.loginShellInit = "";
|
|
|
|
# to build rpi images
|
|
boot.binfmt.emulatedSystems = [
|
|
"aarch64-linux"
|
|
];
|
|
|
|
|
|
######################### networking #####################################
|
|
|
|
networking.hostName = "acern";
|
|
networking.firewall.allowPing = true;
|
|
networking.firewall.enable = true;
|
|
networking.firewall.allowedUDPPorts = [
|
|
3702 # wsdd
|
|
51820 # wireguard
|
|
];
|
|
networking.firewall.allowedTCPPorts = [
|
|
2222 # sshd
|
|
];
|
|
|
|
|
|
networking.networkmanager.enable = true;
|
|
|
|
/*
|
|
networking.networkmanager.profiles = {
|
|
me = {
|
|
connection = {
|
|
id = "me";
|
|
uuid = "fe45d3bc-21c6-41ff-bc06-c936017c6e02";
|
|
type = "wireguard";
|
|
autoconnect = "true";
|
|
interface-name = "me0";
|
|
};
|
|
wireguard = {
|
|
listen-port = "51820";
|
|
private-key = builtins.readFile "${secretsDir}/wg-private-acern";
|
|
};
|
|
ipv4 = {
|
|
address1 = "10.1.1.5/24";
|
|
method = "manual";
|
|
};
|
|
} // (import ../common/wg-peers.nix { inherit secretsDir; }) ;
|
|
};
|
|
*/
|
|
}
|