92 lines
3.1 KiB
Nix
92 lines
3.1 KiB
Nix
# Edit this configuration file to define what should be installed on
|
||
# your system. Help is available in the configuration.nix(5) man page
|
||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||
|
||
{ config, pkgs, ... }:
|
||
|
||
{
|
||
imports =
|
||
[
|
||
../hardware/apu.nix
|
||
../role/base.nix
|
||
];
|
||
|
||
fileSystems."/" =
|
||
{ device = "/dev/disk/by-uuid/ab5a598b-6609-465f-8ab8-b894b8a5e32a";
|
||
fsType = "btrfs";
|
||
options = [ "defaults" "noatime" ];
|
||
};
|
||
|
||
# Use the GRUB 2 boot loader.
|
||
boot.loader.grub.enable = true;
|
||
boot.loader.grub.version = 2;
|
||
# boot.loader.grub.efiSupport = true;
|
||
# boot.loader.grub.efiInstallAsRemovable = true;
|
||
# boot.loader.efi.efiSysMountPoint = "/boot/efi";
|
||
# Define on which hard drive you want to install Grub.
|
||
boot.loader.grub.device = "/dev/mmcblk0"; # or "nodev" for efi only
|
||
|
||
networking.hostName = "kastanje"; # Define your hostname.
|
||
|
||
networking.wireguard.interfaces = {
|
||
# "wg0" is the network interface name. You can name the interface arbitrarily.
|
||
wg0 = {
|
||
# Determines the IP address and subnet of the client's end of the tunnel interface.
|
||
ips = [ "192.168.2.7/24" ];
|
||
|
||
# Path to the private key file.
|
||
#
|
||
# Note: The private key can also be included inline via the privateKey option,
|
||
# but this makes the private key world-readable; thus, using privateKeyFile is
|
||
# recommended.
|
||
privateKeyFile = "/etc/wireguard/privkey";
|
||
|
||
peers = [
|
||
# For a client configuration, one peer entry for the server will suffice.
|
||
{
|
||
# Public key of the server (not a file path).
|
||
publicKey = "EQEle/TXlS3ZE2wPxXhdAdo45dzK+DXi5nglgK6KDXs=";
|
||
|
||
# Forward all the traffic via VPN.
|
||
# allowedIPs = [ "0.0.0.0/0" ];
|
||
# Or forward only particular subnets
|
||
allowedIPs = [ "192.168.2.0/24" ];
|
||
|
||
# Set this to the server IP and port.
|
||
endpoint = "root.mgmt.vpn.qo.is:51820";
|
||
|
||
# Send keepalives every 25 seconds. Important to keep NAT tables alive.
|
||
persistentKeepalive = 25;
|
||
}
|
||
];
|
||
};
|
||
};
|
||
|
||
# Configure network proxy if necessary
|
||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||
|
||
# Set your time zone.
|
||
# time.timeZone = "Europe/Amsterdam";
|
||
|
||
# List services that you want to enable:
|
||
|
||
# Open ports in the firewall.
|
||
# networking.firewall.allowedTCPPorts = [ ... ];
|
||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||
# Or disable the firewall altogether.
|
||
# networking.firewall.enable = false;
|
||
|
||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||
# users.users.jane = {
|
||
# isNormalUser = true;
|
||
# extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
|
||
# };
|
||
|
||
# This value determines the NixOS release with which your system is to be
|
||
# compatible, in order to avoid breaking some software such as database
|
||
# servers. You should change this only after NixOS release notes say you
|
||
# should.
|
||
system.stateVersion = "19.03"; # Did you read the comment?
|
||
|
||
}
|