{ config, pkgs, lib, ... }: let rootdisk = "/dev/disk/by-id/ata-TS256GMTS800_C613840115"; datadisk = "/dev/disk/by-id/ata-HGST_HTS721010A9E630_JR10006PH3A02F"; user = config.makefu.gui.user; primaryIP = "192.168.8.11"; in { imports = [ # Include the results of the hardware scan. # # # # # # # # Services # # Sensors # # { environment.systemPackages = [ pkgs.vlc ]; } # new hass entry point # #mpd is only used for TTS (let collectd-port = 25826; influx-port = 8086; admin-port = 8083; grafana-port = 3000; # TODO nginx forward db = "collectd_db"; logging-interface = "enp0s25"; in { networking.firewall.allowedTCPPorts = [ 3000 influx-port admin-port ]; services.grafana.enable = true; services.grafana.addr = "0.0.0.0"; services.influxdb.enable = true; services.influxdb.extraConfig = { meta.hostname = config.krebs.build.host.name; # meta.logging-enabled = true; http.bind-address = ":${toString influx-port}"; admin.bind-address = ":${toString admin-port}"; collectd = [{ enabled = true; typesdb = "${pkgs.collectd}/share/collectd/types.db"; database = db; bind-address = ":${toString collectd-port}"; }]; }; networking.firewall.extraCommands = '' iptables -A INPUT -i ${logging-interface} -p tcp --dport ${toString grafana-port} -j ACCEPT ''; }) # temporary # ]; krebs = { enable = true; build.host = config.krebs.hosts.wbob; }; swapDevices = [ { device = "/var/swap"; } ]; services.collectd.extraConfig = lib.mkAfter '' #LoadPlugin ping # does not work because it requires privileges # # Host "google.de" # Host "heise.de" # LoadPlugin curl Interval 300 TotalTime true NamelookupTime true ConnectTime true MeasureResponseTime true MeasureResponseCode true URL "https://google.de" MeasureResponseTime true MeasureResponseCode true URL "http://web.de" #LoadPlugin netlink # # Interface "enp0s25" # Interface "wlp2s0" # IgnoreSelected false # ''; networking.firewall.allowedUDPPorts = [ 655 ]; networking.firewall.allowedTCPPorts = [ 655 8081 #smokeping 49152 ]; networking.firewall.trustedInterfaces = [ "enp0s25" ]; #services.tinc.networks.siem = { # name = "display"; # extraConfig = '' # ConnectTo = sjump # Port = 1655 # ''; #}; # rt2870.bin wifi card, part of linux-unfree hardware.enableAllFirmware = true; nixpkgs.config.allowUnfree = true; # rt2870 with nonfree creates wlp2s0 from wlp0s20u2 # not explicitly setting the interface results in wpa_supplicant to crash networking.interfaces.virbr1.ipv4.addresses = [{ address = "10.8.8.11"; prefixLength = 24; }]; # nuc hardware boot.loader.grub.device = rootdisk; hardware.cpu.intel.updateMicrocode = true; boot.initrd.availableKernelModules = [ "xhci_pci" "ehci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ]; boot.kernelModules = [ "kvm-intel" "snd-seq" "snd-rawmidi" ]; fileSystems = { "/" = { device = rootdisk + "-part1"; fsType = "ext4"; }; "/data" = { device = datadisk + "-part1"; fsType = "ext4"; }; }; }