summaryrefslogtreecommitdiff
path: root/parts/modules/nixos/server/default.nix
diff options
context:
space:
mode:
authorseth <[email protected]>2023-10-01 10:41:09 -0400
committerseth <[email protected]>2023-10-01 10:49:46 -0400
commita8630322f77dbb7be4810099a42352b9278996a1 (patch)
treeb8df66a7e5b9d8c31b27a4a9b357ff7e4b9d418f /parts/modules/nixos/server/default.nix
parent30f55e656d344e017f66ecbae8eb27cf13ba53bb (diff)
treewide!: flatten to parts/ layout
Diffstat (limited to 'parts/modules/nixos/server/default.nix')
-rw-r--r--parts/modules/nixos/server/default.nix47
1 files changed, 47 insertions, 0 deletions
diff --git a/parts/modules/nixos/server/default.nix b/parts/modules/nixos/server/default.nix
new file mode 100644
index 0000000..acab4fc
--- /dev/null
+++ b/parts/modules/nixos/server/default.nix
@@ -0,0 +1,47 @@
+{
+ config,
+ lib,
+ pkgs,
+ inputs,
+ ...
+}: let
+ cfg = config.server;
+ inherit (lib) mkDefault mkEnableOption mkIf;
+in {
+ options.server.enable = mkEnableOption "enable server configuration";
+
+ imports = [
+ ./acme.nix
+ ./secrets.nix
+ ./services
+ ];
+
+ config = mkIf cfg.enable {
+ _module.args.unstable = inputs.nixpkgs.legacyPackages.${pkgs.stdenv.hostPlatform.system};
+
+ base = {
+ enable = true;
+ documentation.enable = false;
+ defaultPackages.enable = false;
+ networking.enable = false;
+ };
+
+ nix = {
+ gc = {
+ dates = "*-*-1,5,9,13,17,21,25,29 00:00:00";
+ options = "-d --delete-older-than 2d";
+ };
+
+ settings.allowed-users = [config.networking.hostName];
+ };
+
+ programs = {
+ git.enable = mkDefault true;
+ vim.defaultEditor = mkDefault true;
+ };
+
+ security = {
+ pam.enableSSHAgentAuth = mkDefault true;
+ };
+ };
+}