host/Module-dev/configuration.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

{
  pkgs,
  lib,
  grapevine,
  ...
}:

{
  imports = [
    ../../modules/base-server.nix
    ./set/matrix/root.nix
  ];

  networking = {
    hostName = "Module-dev";
    useDHCP = lib.mkForce true;
    defaultGateway.interface = "eth0";
    nat = {
      enable = true;
      internalInterfaces = [
        "ve-+"
        "vb-+"
      ];
      externalInterface = "ens18";
      enableIPv6 = false;
    };
    enableIPv6 = lib.mkForce false;
    nameservers = lib.mkForce [ "192.168.1.1" ];
  };

  monitoring = {
    monitorAll = true;
    localPrometheus = true;
    exposePrometheus = true;
    localGrafana = true;
    exposeGrafana = true;
    nginxHost = "monitoring.rory.gay";
    nginxSsl = true;
  };

  nixpkgs.config.permittedInsecurePackages = [
    "olm-3.2.16"
    "dotnet-runtime-wrapped-7.0.20"
    "dotnet-runtime-7.0.20"
    "dotnet-sdk-7.0.20"
  ];
  services.irqbalance.enable = true;

  environment.memoryAllocator.provider = "jemalloc";

  system.stateVersion = lib.trivial.release; # DO NOT copy to real configs!

  environment.systemPackages = with pkgs; [ waypipe ];
  nix.nrBuildUsers = 128;
}