1 { pkgs, lib, config, name, nodes, ... }:
4 networking.extraHosts = builtins.concatStringsSep "\n"
5 (lib.mapAttrsToList (n: v: "${v.config.hostEnv.ips.main.ip4} ${n}") nodes);
7 users.extraUsers.root.openssh.authorizedKeys.keyFiles = [ "${config.myEnv.privateFiles}/id_ed25519.pub" ];
8 services.openssh.enable = true;
10 services.duplyBackup.profiles.system = {
12 excludeFile = lib.mkAfter ''
17 + /var/lib/private/systemd
21 nixpkgs.overlays = builtins.attrValues (import ../../overlays) ++ [
23 postgresql = self.postgresql_pam;
24 mariadb = self.mariadb_pam;
25 }) # don’t put them as generic overlay because of home-manager
28 services.journald.extraConfig = ''
29 #Should be "warning" but disabled for now, it prevents anything from being stored
35 builtins.listToAttrs (map (x: lib.attrsets.nameValuePair x.name ({
37 home = "/home/${x.name}";
40 } // x)) (config.hostEnv.users pkgs))
43 nagios-cli = pkgs.writeScriptBin "nagios-cli" ''
44 #!${pkgs.stdenv.shell}
45 sudo -u naemon ${pkgs.nagios-cli}/bin/nagios-cli -c ${./monitoring/nagios-cli.cfg}
60 # pkgs.mitmproxy # failing
77 users.mutableUsers = lib.mkDefault false;
79 environment.etc.cnagios.source = "${pkgs.cnagios}/share/doc/cnagios";
80 environment.systemPackages = [
86 (lib.optional (builtins.length (config.hostEnv.users pkgs) > 0) pkgs.home-manager);
88 systemd.targets.maintenance = {
89 description = "Maintenance target with only sshd";
90 after = [ "network-online.target" "sshd.service" ];
91 requires = [ "network-online.target" "sshd.service" ];
92 unitConfig.AllowIsolate = "yes";