Pretty massive changes really
This commit is contained in:
@@ -88,7 +88,7 @@ in {
|
||||
};
|
||||
|
||||
fudo = let
|
||||
backplane-dns-password-file = pkgs.lib.fudo.passwd.stablerandom-passwd-file
|
||||
backplane-dns-password-file = pkgs.lib.passwd.stablerandom-passwd-file
|
||||
"dns-service-backplane-passwd"
|
||||
"dns-service-backplane-passwd-${config.instance.build-seed}";
|
||||
in {
|
||||
@@ -118,7 +118,7 @@ in {
|
||||
};
|
||||
ldap-root-passwd = {
|
||||
source-file =
|
||||
pkgs.lib.fudo.passwd.random-passwd-file "ldap-root-passwd" 20;
|
||||
pkgs.lib.passwd.random-passwd-file "ldap-root-passwd" 20;
|
||||
target-file = "/run/openldap/root.passwd";
|
||||
user = ldap-user;
|
||||
group = ldap-group;
|
||||
|
||||
@@ -36,12 +36,6 @@ in {
|
||||
# secret-paths = [ "/state/secrets" ];
|
||||
# };
|
||||
|
||||
fudo.games.valheim = {
|
||||
enable = true;
|
||||
state-directory = "/state/games/valheim";
|
||||
password = "silkymilky";
|
||||
};
|
||||
|
||||
systemd.tmpfiles.rules = [
|
||||
"L /root/.gnupg - - - - ${state-dir}/user/root/gnupg"
|
||||
"L /root/.ssh/id_rsa - - - - ${state-dir}/user/root/ssh/id_rsa"
|
||||
|
||||
@@ -57,7 +57,7 @@ in {
|
||||
dhcp-dynamic-network = site.dynamic-network;
|
||||
search-domains = [ domain-name "fudo.org" ];
|
||||
enable-reverse-mappings = true;
|
||||
network-definition = config.fudo.networks.${domain-name};
|
||||
zone-definition = config.fudo.zones.${domain-name};
|
||||
};
|
||||
|
||||
client.dns.external-interface = "enp1s0";
|
||||
|
||||
@@ -17,13 +17,15 @@ in {
|
||||
|
||||
intif0 = { useDHCP = true; };
|
||||
};
|
||||
|
||||
firewall.enable = false;
|
||||
};
|
||||
|
||||
# Hopefully this'll help with NFS...
|
||||
boot.kernelModules = [ "rpcsec_gss_krb5" ];
|
||||
|
||||
services.nfs = {
|
||||
# See lib/fudo/users.nix for the user@REALM -> user mapping
|
||||
# See ../user-config.nix for the user@REALM -> user mapping
|
||||
server = {
|
||||
enable = true;
|
||||
createMountPoints = false;
|
||||
@@ -56,12 +58,4 @@ in {
|
||||
# users = [ "niten" ];
|
||||
# api-address = "/ip4/0.0.0.0/tcp/5001";
|
||||
# };
|
||||
|
||||
virtualisation = {
|
||||
libvirtd = {
|
||||
enable = true;
|
||||
qemuPackage = pkgs.qemu_kvm;
|
||||
onShutdown = "shutdown";
|
||||
};
|
||||
};
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user