summaryrefslogtreecommitdiffstats
path: root/makefu/1systems/wbob/config.nix
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2023-07-28 22:24:15 +0200
committermakefu <github@syntax-fehler.de>2023-07-28 22:24:15 +0200
commit060a8f28fa1fc648bdf66afb31a5d1efac868837 (patch)
tree2b354eacc7897365ee45244fe7a51720e0d0333f /makefu/1systems/wbob/config.nix
parentcbfcc890e3b76d942b927809bf981a5fa7289e6a (diff)
makefu: move out to own repo, add vacation-note
Diffstat (limited to 'makefu/1systems/wbob/config.nix')
-rw-r--r--makefu/1systems/wbob/config.nix139
1 files changed, 0 insertions, 139 deletions
diff --git a/makefu/1systems/wbob/config.nix b/makefu/1systems/wbob/config.nix
deleted file mode 100644
index 77f0f0337..000000000
--- a/makefu/1systems/wbob/config.nix
+++ /dev/null
@@ -1,139 +0,0 @@
-{ config, pkgs, lib, ... }:
-let
- user = config.makefu.gui.user;
- primaryIP = "192.168.8.11";
-in {
-
- imports =
- [
- <stockholm/makefu>
- # Include the results of the hardware scan.
- ./nuc
-
- <stockholm/makefu/2configs/home-manager>
- <stockholm/makefu/2configs/support-nixos.nix>
- <stockholm/makefu/2configs/zsh-user.nix>
- <stockholm/makefu/2configs/tools/core.nix>
- # <stockholm/makefu/2configs/disable_v6.nix>
- <stockholm/makefu/2configs/tools/core-gui.nix>
- <stockholm/makefu/2configs/tools/extra-gui.nix>
- <stockholm/makefu/2configs/tools/media.nix>
- # <stockholm/makefu/2configs/virtualisation/libvirt.nix>
- # <stockholm/makefu/2configs/virtualisation/virtualbox.nix>
- <stockholm/makefu/2configs/tinc/retiolum.nix>
- <stockholm/makefu/2configs/gui/wbob-kiosk.nix>
- { environment.systemPackages = [ pkgs.brother_ql_web pkgs.nano ]; }
-
- # <stockholm/makefu/2configs/gui/studio-virtual.nix>
- # <stockholm/makefu/2configs/audio/jack-on-pulse.nix>
- # <stockholm/makefu/2configs/audio/realtime-audio.nix>
- # <stockholm/makefu/2configs/vncserver.nix>
- ## no need for dns logs anymore
- # <stockholm/makefu/2configs/logging/server.nix>
-
- # Services
- # <stockholm/makefu/2configs/hydra/stockholm.nix>
-
- <stockholm/makefu/2configs/share/wbob.nix>
- <stockholm/makefu/2configs/wireguard/thierry.nix>
- <stockholm/makefu/2configs/bluetooth-mpd.nix>
-
- # Sensors
- # <stockholm/makefu/2configs/stats/client.nix>
- # <stockholm/makefu/2configs/stats/collectd-client.nix>
- <stockholm/makefu/2configs/stats/telegraf>
- <stockholm/makefu/2configs/stats/telegraf/airsensor.nix>
- <stockholm/makefu/2configs/stats/telegraf/europastats.nix>
- <stockholm/makefu/2configs/stats/external/aralast.nix>
- <stockholm/makefu/2configs/stats/arafetch.nix>
- # <stockholm/makefu/2configs/hw/mceusb.nix>
- <stockholm/makefu/2configs/hw/slaesh.nix>
- # <stockholm/makefu/2configs/stats/telegraf/bamstats.nix>
- { environment.systemPackages = [ pkgs.vlc ]; }
-
- <stockholm/makefu/2configs/bureautomation> # new hass entry point
- <stockholm/makefu/2configs/bureautomation/led-fader.nix>
- <stockholm/makefu/2configs/bureautomation/printer.nix>
- # <stockholm/makefu/2configs/bureautomation/kalauerbot.nix> now runs in thales
- # <stockholm/makefu/2configs/bureautomation/visitor-photostore.nix>
- # <stockholm/makefu/2configs/bureautomation/mpd.nix> #mpd is only used for TTS, this is the web interface
- <stockholm/makefu/2configs/mqtt.nix>
- {
- services.mjpg-streamer = {
- enable = true;
- inputPlugin = "input_uvc.so -d /dev/video0 -r 640x480 -y -f 30 -q 50 -n";
- outputPlugin = "output_http.so -w @www@ -n -p 18088";
- };
- }
- (let
- collectd-port = 25826;
- influx-port = 8086;
- admin-port = 8083;
- grafana-port = 3000; # TODO nginx forward
- db = "collectd_db";
- logging-interface = "enp0s25";
- in {
- networking.firewall.allowedTCPPorts = [ 3000 influx-port admin-port ];
-
- services.grafana.enable = true;
- services.grafana.addr = "0.0.0.0";
- services.influxdb.enable = true;
- systemd.services.influxdb.serviceConfig.LimitNOFILE = 8192;
-
- services.influxdb.extraConfig = {
- meta.hostname = config.krebs.build.host.name;
- # meta.logging-enabled = true;
- http.bind-address = ":${toString influx-port}";
- admin.bind-address = ":${toString admin-port}";
- collectd = [{
- enabled = true;
- typesdb = "${pkgs.collectd}/share/collectd/types.db";
- database = db;
- bind-address = ":${toString collectd-port}";
- }];
- };
-
- networking.firewall.extraCommands = ''
- iptables -A INPUT -i ${logging-interface} -p tcp --dport ${toString grafana-port} -j ACCEPT
- '';
- })
-
- <stockholm/makefu/2configs/backup/state.nix>
- # temporary
- # <stockholm/makefu/2configs/temp/rst-issue.nix>
- {
- services.jellyfin.enable = true;
- }
- ];
-
- krebs = {
- enable = true;
- build.host = config.krebs.hosts.wbob;
- };
-
- networking.firewall.allowedUDPPorts = [ 655 ];
- networking.firewall.allowedTCPPorts = [
- 655
- 8081 # smokeping
- 49152
- ];
- networking.firewall.trustedInterfaces = [ "enp0s25" ];
- #services.tinc.networks.siem = {
- # name = "display";
- # extraConfig = ''
- # ConnectTo = sjump
- # Port = 1655
- # '';
- #};
- #boot.kernelPackages = pkgs.linuxPackages_latest;
- # rt2870.bin wifi card, part of linux-unfree
- hardware.enableRedistributableFirmware = true;
- nixpkgs.config.allowUnfree = true;
- # rt2870 with nonfree creates wlp2s0 from wlp0s20u2
- # not explicitly setting the interface results in wpa_supplicant to crash
- #networking.interfaces.virbr1.ipv4.addresses = [{
- # address = "10.8.8.11";
- # prefixLength = 24;
- #}];
- # nuc hardware
-}