this repo has no description
woo yea
+96
-3
+63
flake.lock
+63
flake.lock
···
1
1
{
2
2
"nodes": {
3
+
"blog": {
4
+
"inputs": {
5
+
"flakeUtils": "flakeUtils",
6
+
"htmlNix": "htmlNix",
7
+
"nixpkgs": [
8
+
"nixpkgs"
9
+
]
10
+
},
11
+
"locked": {
12
+
"lastModified": 1659152758,
13
+
"narHash": "sha256-nbCRaXMAXfNvrqtWT2WtcYsf2Rym0Zv2WFJDmXk5sgY=",
14
+
"owner": "yusdacra",
15
+
"repo": "yusdacra.gitlab.io",
16
+
"rev": "420e525b8b8210e997748e500f55690fd89a8fca",
17
+
"type": "gitlab"
18
+
},
19
+
"original": {
20
+
"owner": "yusdacra",
21
+
"repo": "yusdacra.gitlab.io",
22
+
"type": "gitlab"
23
+
}
24
+
},
3
25
"crane": {
4
26
"flake": false,
5
27
"locked": {
···
110
132
"type": "github"
111
133
}
112
134
},
135
+
"flakeUtils": {
136
+
"locked": {
137
+
"lastModified": 1648297722,
138
+
"narHash": "sha256-W+qlPsiZd8F3XkzXOzAoR+mpFqzm3ekQkJNa+PIh1BQ=",
139
+
"owner": "numtide",
140
+
"repo": "flake-utils",
141
+
"rev": "0f8662f1319ad6abf89b3380dd2722369fc51ade",
142
+
"type": "github"
143
+
},
144
+
"original": {
145
+
"owner": "numtide",
146
+
"repo": "flake-utils",
147
+
"type": "github"
148
+
}
149
+
},
113
150
"fufexan": {
114
151
"flake": false,
115
152
"locked": {
···
167
204
"owner": "nix-community",
168
205
"ref": "master",
169
206
"repo": "home-manager",
207
+
"type": "github"
208
+
}
209
+
},
210
+
"htmlNix": {
211
+
"inputs": {
212
+
"flakeUtils": [
213
+
"blog",
214
+
"flakeUtils"
215
+
],
216
+
"nixpkgs": [
217
+
"blog",
218
+
"nixpkgs"
219
+
]
220
+
},
221
+
"locked": {
222
+
"lastModified": 1645050947,
223
+
"narHash": "sha256-BHPdruYD+6VAyfgsZ33jn00okHQZuxY6Veg4EUei85o=",
224
+
"owner": "yusdacra",
225
+
"repo": "html.nix",
226
+
"rev": "18fa28319f4cdca933da8f413a3e3bcfb36d37b0",
227
+
"type": "github"
228
+
},
229
+
"original": {
230
+
"owner": "yusdacra",
231
+
"repo": "html.nix",
170
232
"type": "github"
171
233
}
172
234
},
···
301
363
},
302
364
"root": {
303
365
"inputs": {
366
+
"blog": "blog",
304
367
"fufexan": "fufexan",
305
368
"helix": "helix",
306
369
"home": "home",
+2
flake.nix
+2
flake.nix
+31
-3
hosts/wolumonde/default.nix
+31
-3
hosts/wolumonde/default.nix
···
1
-
{inputs, ...}: {
1
+
{
2
+
inputs,
3
+
pkgs,
4
+
...
5
+
}: {
2
6
imports = [
3
7
./hardware-configuration.nix
4
8
];
···
6
10
boot.cleanTmpDir = true;
7
11
zramSwap.enable = true;
8
12
13
+
# ssh config
14
+
services.fail2ban.enable = true;
9
15
services.openssh = {
10
16
enable = true;
11
17
passwordAuthentication = false;
12
18
};
13
-
services.fail2ban.enable = true;
14
-
15
19
users.users.root.openssh.authorizedKeys.keys = [
16
20
(builtins.readFile "${inputs.self}/secrets/ssh-key.pub")
17
21
];
18
22
23
+
# nginx
24
+
services.nginx = {
25
+
enable = true;
26
+
virtualHosts."gaze.systems" = {
27
+
enableACME = true;
28
+
forceSSL = true;
29
+
root = "${inputs.blog.packages.${pkgs.system}.website}";
30
+
};
31
+
};
32
+
security.acme = {
33
+
acceptTerms = true;
34
+
certs = {
35
+
"gaze.systems".email = "y.bera003.06@pm.me";
36
+
};
37
+
};
38
+
39
+
# firewall stuffs
40
+
networking.firewall = {
41
+
enable = true;
42
+
allowedTCPPorts = [ 22 80 443 ];
43
+
allowedUDPPortRanges = [ ];
44
+
};
45
+
46
+
# nixinate for deployment
19
47
_module.args.nixinate = {
20
48
host = builtins.readFile "${inputs.self}/secrets/wolumonde-ip";
21
49
sshUser = "root";