modules/private/system.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63

{ pkgs, lib, ... }:
{
  config = {
    services.duplyBackup.profiles.system = {
      rootDir = "/var/lib";
      excludeFile = lib.mkAfter ''
        + /var/lib/nixos
        + /var/lib/udev
        + /var/lib/udisks2
        + /var/lib/systemd
        + /var/lib/private/systemd
        - /var/lib
        '';
    };
    nixpkgs.overlays = builtins.attrValues (import ../../overlays);
    _module.args = {
      pkgsNext = import <nixpkgsNext> {};
      pkgsPrevious = import <nixpkgsPrevious> {};
    };

    services.journald.extraConfig = ''
      MaxLevelStore="warning"
      MaxRetentionSec="1year"
      '';

    users.mutableUsers = false;
    users.users.root.packages = let
      nagios-cli = pkgs.writeScriptBin "nagios-cli" ''
        #!${pkgs.stdenv.shell}
        sudo -u naemon ${pkgs.nagios-cli}/bin/nagios-cli -c ${./monitoring/nagios-cli.cfg}
        '';
    in
      [
        pkgs.telnet
        pkgs.htop
        pkgs.iftop
        pkgs.bind.dnsutils
        pkgs.httpie
        pkgs.iotop
        pkgs.whois
        pkgs.ngrep
        pkgs.tcpdump
        pkgs.tshark
        pkgs.tcpflow
        pkgs.mitmproxy
        pkgs.nmap
        pkgs.p0f
        pkgs.socat
        pkgs.lsof
        pkgs.psmisc
        pkgs.wget

        pkgs.cnagios
        nagios-cli
      ];

    environment.etc.cnagios.source = "${pkgs.cnagios}/share/doc/cnagios";
    environment.systemPackages = [
      pkgs.vim
    ];

  };
}