Reimport synapse configuration

[perso/Immae/Config/Nix.git] / systems / zoldene / base.nix

diff --git a/systems/zoldene/base.nix b/systems/zoldene/base.nix
index 2c0a4611b66c20a2cd8269ede3777ecadde85861..1b42a523c29ea1b9169b7c3b1c26c947f0ac7239 100644 (file)
--- a/systems/zoldene/base.nix
+++ b/systems/zoldene/base.nix
@@ -13,6 +13,7 @@ in
     secrets.nixosModules.users-config-zoldene
     ./virtualisation.nix
     ./certificates.nix
+    ./synapse.nix
   ];
 
   services.openssh = {
@@ -84,6 +85,19 @@ in
     firewall.allowedUDPPorts = [ 43484 ];
     # needed for initrd proper network setup too
     useDHCP = lib.mkDefault true;
+    interfaces."enp0s31f6".ipv6.addresses = pkgs.lib.flatten (pkgs.lib.attrsets.mapAttrsToList
+      (n: ips: map (ip: { address = ip; prefixLength = (if n == "main" && ip == pkgs.lib.head ips.ip6 then 64 else 128); }) (ips.ip6 or []))
+      config.hostEnv.ips);
+    defaultGateway6 = {
+      address = "fe80::1";
+      interface = "enp0s31f6";
+    };
+    nameservers = [
+      "185.12.64.1"
+      "185.12.64.2"
+      "2a01:4ff:ff00::add:1"
+      "2a01:4ff:ff00::add:2"
+    ];
 
     wireguard.interfaces.wg0 = {
       generatePrivateKeyFile = true;
@@ -99,7 +113,7 @@ in
     };
   };
 
-  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
+  powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand";
   hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
   hardware.enableRedistributableFirmware = lib.mkDefault true;
   system.activationScripts.createDatasets = {
@@ -126,5 +140,15 @@ in
   # ssh-keyscan zoldene | nix-shell -p ssh-to-age --run ssh-to-age
   secrets.ageKeys = [ "age1rqr7qdpjm8fy9nf3x07fa824v87n40g0ljrgdysuayuklnvhcynq4c8en8" ];
 
+  system.activationScripts.wrappers = {
+    text = ''
+      # wrappers was migrated to systemd, which happens before activation
+    '';
+  };
 
+  nixpkgs.overlays = [
+    (self: super: {
+      postgresql_system = self.postgresql_16;
+    })
+  ];
 }