WIP with placeholder secrets
This commit is contained in:
@@ -8,19 +8,18 @@ in
|
||||
flake.nixosConfigurations."${hostname}" = inputs.nixpkgs.lib.nixosSystem {
|
||||
modules = with inputs.self.modules; [
|
||||
nixos.lxc
|
||||
nixos."${username}"
|
||||
nixos.mysops
|
||||
nixos."${username}"
|
||||
nixos.step-ssh-host
|
||||
nixos.login-text
|
||||
nixos.docker
|
||||
nixos.mtls
|
||||
nixos.janus-ca
|
||||
nixos.step-client
|
||||
nixos.forgejo
|
||||
nixos.restic-server
|
||||
# nixos.restic-envoy
|
||||
({ config, pkgs, ... }: {
|
||||
networking.hostName = hostname;
|
||||
time.timeZone = "America/Chicago";
|
||||
|
||||
# Removes password for sudo
|
||||
security.sudo-rs.extraRules = lib.mkAfter [
|
||||
@@ -38,7 +37,6 @@ in
|
||||
users.users."${username}".extraGroups = [ "mtls" ];
|
||||
mtls = {
|
||||
enable = true;
|
||||
certDir = config.janus-ca.certDir;
|
||||
subject = hostname;
|
||||
san = [
|
||||
"${hostname}.john-stream.com"
|
||||
@@ -98,6 +96,7 @@ in
|
||||
imports = [
|
||||
inputs.self.modules.homeManager.rebuild
|
||||
inputs.self.modules.homeManager.mysops
|
||||
inputs.self.modules.homeManager.step-client
|
||||
({ config, pkgs, lib, ... }: {
|
||||
homeManagerFlakeDir = "${config.xdg.configHome}/home-manager";
|
||||
docker.enable = true;
|
||||
|
||||
Reference in New Issue
Block a user