krebs/1systems/filebitch/config.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

{ config, pkgs, ... }:
let
  shack-ip = config.krebs.build.host.nets.shack.ip4.addr;
in
{
  imports = [
    ./hardware-configuration.nix
    <stockholm/krebs>
    <stockholm/krebs/2configs>
    # <stockholm/krebs/2configs/secret-passwords.nix>

    # <stockholm/krebs/2configs/binary-cache/nixos.nix>
    # <stockholm/krebs/2configs/binary-cache/prism.nix>
    <stockholm/krebs/2configs/shack/ssh-keys.nix>
    <stockholm/krebs/2configs/shack/prometheus/node.nix>
    # provides access to /home/share for smbuser via smb
    <stockholm/krebs/2configs/shack/share.nix>
    {
      fileSystems."/home/share" =
        { device = "/serve";
          options = [ "bind" "nofail" ];
        };
    }

    ## Collect local statistics via collectd and send to collectd
    <stockholm/krebs/2configs/stats/shack-client.nix>
    <stockholm/krebs/2configs/stats/shack-debugging.nix>
  ];

  krebs.build.host = config.krebs.hosts.filebitch;
  sound.enable = false;

  services.udev.extraRules = ''
    SUBSYSTEM=="net", ATTR{address}=="60:a4:4c:3d:52:cf", NAME="et0"
  '';
  networking = {
    firewall.enable = true;
    interfaces.et0.ipv4.addresses = [
      {
        address = shack-ip;
        prefixLength = 20;
      }
    ];

    defaultGateway = "10.42.0.1";
    nameservers = [ "10.42.0.100" "10.42.0.200" ];
  };
}