lass/1systems/neoprism/config.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

{ config, lib, pkgs, ... }:

{
  imports = [
    <stockholm/lass>
    <stockholm/lass/2configs/retiolum.nix>

    # sync-containers
    <stockholm/lass/2configs/consul.nix>
    <stockholm/lass/2configs/services/flix/container-host.nix>
    <stockholm/lass/2configs/services/radio/container-host.nix>
    <stockholm/lass/2configs/ubik-host.nix>
    <stockholm/lass/2configs/orange-host.nix>
    <stockholm/krebs/2configs/hotdog-host.nix>

    # other containers
    <stockholm/lass/2configs/riot.nix>

    # proxying of services
    <stockholm/lass/2configs/services/radio/proxy.nix>
    <stockholm/lass/2configs/services/flix/proxy.nix>
    <stockholm/lass/2configs/services/coms/proxy.nix>
  ];

  krebs.build.host = config.krebs.hosts.neoprism;

  networking.firewall.allowedTCPPorts = [ 80 443 ];
  services.nginx.enable = true;
  security.acme.acceptTerms = true;
  security.acme.defaults.email = "acme@lassul.us";
}