From 060a8f28fa1fc648bdf66afb31a5d1efac868837 Mon Sep 17 00:00:00 2001 From: makefu Date: Fri, 28 Jul 2023 22:24:15 +0200 Subject: makefu: move out to own repo, add vacation-note --- makefu/1systems/wbob/config.nix | 139 ---------------------------------------- 1 file changed, 139 deletions(-) delete mode 100644 makefu/1systems/wbob/config.nix (limited to 'makefu/1systems/wbob/config.nix') diff --git a/makefu/1systems/wbob/config.nix b/makefu/1systems/wbob/config.nix deleted file mode 100644 index 77f0f033..00000000 --- a/makefu/1systems/wbob/config.nix +++ /dev/null @@ -1,139 +0,0 @@ -{ config, pkgs, lib, ... }: -let - user = config.makefu.gui.user; - primaryIP = "192.168.8.11"; -in { - - imports = - [ - - # Include the results of the hardware scan. - ./nuc - - - - - - # - - - - # - # - - - { environment.systemPackages = [ pkgs.brother_ql_web pkgs.nano ]; } - - # - # - # - # - ## no need for dns logs anymore - # - - # Services - # - - - - - - # Sensors - # - # - - - - - - # - - # - { environment.systemPackages = [ pkgs.vlc ]; } - - # new hass entry point - - - # now runs in thales - # - # #mpd is only used for TTS, this is the web interface - - { - services.mjpg-streamer = { - enable = true; - inputPlugin = "input_uvc.so -d /dev/video0 -r 640x480 -y -f 30 -q 50 -n"; - outputPlugin = "output_http.so -w @www@ -n -p 18088"; - }; - } - (let - collectd-port = 25826; - influx-port = 8086; - admin-port = 8083; - grafana-port = 3000; # TODO nginx forward - db = "collectd_db"; - logging-interface = "enp0s25"; - in { - networking.firewall.allowedTCPPorts = [ 3000 influx-port admin-port ]; - - services.grafana.enable = true; - services.grafana.addr = "0.0.0.0"; - services.influxdb.enable = true; - systemd.services.influxdb.serviceConfig.LimitNOFILE = 8192; - - services.influxdb.extraConfig = { - meta.hostname = config.krebs.build.host.name; - # meta.logging-enabled = true; - http.bind-address = ":${toString influx-port}"; - admin.bind-address = ":${toString admin-port}"; - collectd = [{ - enabled = true; - typesdb = "${pkgs.collectd}/share/collectd/types.db"; - database = db; - bind-address = ":${toString collectd-port}"; - }]; - }; - - networking.firewall.extraCommands = '' - iptables -A INPUT -i ${logging-interface} -p tcp --dport ${toString grafana-port} -j ACCEPT - ''; - }) - - - # temporary - # - { - services.jellyfin.enable = true; - } - ]; - - krebs = { - enable = true; - build.host = config.krebs.hosts.wbob; - }; - - networking.firewall.allowedUDPPorts = [ 655 ]; - networking.firewall.allowedTCPPorts = [ - 655 - 8081 # smokeping - 49152 - ]; - networking.firewall.trustedInterfaces = [ "enp0s25" ]; - #services.tinc.networks.siem = { - # name = "display"; - # extraConfig = '' - # ConnectTo = sjump - # Port = 1655 - # ''; - #}; - #boot.kernelPackages = pkgs.linuxPackages_latest; - # rt2870.bin wifi card, part of linux-unfree - hardware.enableRedistributableFirmware = true; - nixpkgs.config.allowUnfree = true; - # rt2870 with nonfree creates wlp2s0 from wlp0s20u2 - # not explicitly setting the interface results in wpa_supplicant to crash - #networking.interfaces.virbr1.ipv4.addresses = [{ - # address = "10.8.8.11"; - # prefixLength = 24; - #}]; - # nuc hardware -} -- cgit v1.2.3