Commit files for public release

nixos-configurations/lindberg-webapps/applications/README.md

@@ -0,0 +1,3 @@
+# Web Apps
+
+## fabianhauser.ch

nixos-configurations/lindberg-webapps/applications/default.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, ... }:
+{
+
+  imports = [ ];
+
+  qois.vault.enable = true;
+  qois.git.enable = true;
+  qois.static-page.enable = true;
+}

nixos-configurations/lindberg-webapps/default.nix

@@ -0,0 +1,25 @@
+{ config, pkgs, ... }:
+
+{
+  imports = [
+    ../../defaults/base-vm
+    ../../defaults/meta
+    ../../defaults/backplane-net
+
+    ./applications
+    ./disko-config.nix
+    ./networking.nix
+    ./secrets.nix
+  ];
+
+  # Set your time zone.
+  time.timeZone = "Europe/Amsterdam";
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "23.11"; # Did you read the comment?
+}

nixos-configurations/lindberg-webapps/disko-config.nix

@@ -0,0 +1,38 @@
+{ ... }:
+{
+  disko.devices.disk = {
+    system = {
+      type = "disk";
+      device = "/dev/vda";
+      content = {
+        type = "gpt";
+        partitions = {
+          boot = {
+            # for grub MBR
+            size = "1M";
+            type = "EF02";
+          };
+          system = {
+            size = "100%";
+            content = {
+              type = "btrfs";
+              subvolumes = {
+                "/nix" = {
+                  mountpoint = "/nix";
+                  mountOptions = [
+                    "compress=zstd"
+                    "noatime"
+                  ];
+                };
+                "/root" = {
+                  mountpoint = "/";
+                  mountOptions = [ "noatime" ];
+                };
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+}

nixos-configurations/lindberg-webapps/networking.nix

@@ -0,0 +1,13 @@
+{ config, pkgs, ... }:
+
+{
+
+  networking.hostName = config.qois.meta.hosts.lindberg-webapps.hostName;
+  networking.useDHCP = false;
+  networking.interfaces.enp1s0.useDHCP = true;
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+}

nixos-configurations/lindberg-webapps/secrets.nix

@@ -0,0 +1,4 @@
+{ ... }:
+{
+  sops.secrets = { };
+}