55 lines
1 KiB
Nix
55 lines
1 KiB
Nix
{
|
|
pkgs,
|
|
lib,
|
|
...
|
|
}: let
|
|
sshKeys = import ../../crypto/ssh-keys.nix;
|
|
in {
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
../../common/base.nix
|
|
|
|
../../common/hardware/raspberry-pi.nix
|
|
|
|
../../modules/nixos/vedirect-reader.nix
|
|
|
|
../../common/components/enry.nix
|
|
];
|
|
|
|
networking = {
|
|
hostName = "enry";
|
|
|
|
firewall = {
|
|
allowedTCPPorts = [
|
|
2342
|
|
8080 # ?
|
|
9000
|
|
9002
|
|
];
|
|
};
|
|
};
|
|
|
|
nix.settings.trusted-users = ["root" "@wheel"]; # TODO
|
|
|
|
users.users.tasia = {
|
|
isNormalUser = true;
|
|
description = "Tasia";
|
|
extraGroups = ["networkmanager" "wheel" "dialout"];
|
|
initialPassword = "correcthorsebatterystaple";
|
|
openssh.authorizedKeys.keys = [
|
|
sshKeys.tasia.yaseen
|
|
];
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
nodejs
|
|
vedirect-reader
|
|
];
|
|
|
|
services.prometheus.enable = true;
|
|
services.vedirect-reader.enable = true;
|
|
|
|
# https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
|
|
system.stateVersion = "23.11";
|
|
}
|