nix/systems/spontaneity/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

{ config, lib, ... }:
{
  imports = [
    ../includes.nix
    # nixos-anywhere generates this file
    ./hardware-configuration.nix
    ../../disko/drive-bios.nix
  ];
  config = {
    monorepo = {
      vars.device = "/dev/vda";
      profiles = {
        server.enable = true;
        ttyonly.enable = true;
        grub.enable = true;
      };
    };

    boot.loader.grub.device = "nodev";
    networking = {
      firewall.allowedTCPPorts = [
        80
        443
        465
        993
        8448
        6697
        6667
      ];
      domains = {
        enable = true;
        baseDomains = {
          "${config.monorepo.vars.remoteHost}" = {
            a.data = "66.42.84.130";
            aaaa.data = "2001:19f0:5401:10d0:5400:5ff:fe4a:7794";
          };
          "nullring.xyz" = {
            a.data = "66.42.84.130";
            aaaa.data = "2001:19f0:5401:10d0:5400:5ff:fe4a:7794";
          };
        };
        subDomains = {
          "${config.monorepo.vars.remoteHost}" = {};
          "matrix.${config.monorepo.vars.remoteHost}" = {};
          "www.${config.monorepo.vars.remoteHost}" = {};
          "mail.${config.monorepo.vars.remoteHost}" = {};

          "nullring.xyz" = {};
          "git.nullring.xyz" = {};
          "matrix.nullring.xyz" = {};
          "talk.nullring.xyz" = {};
          "mail.nullring.xyz" = {};
          "ret2pop.nullring.xyz" = {};
        };
      };
    };
  };
}