Commit 6426821d790a

Vincent Demeester <vincent@sbr.pm>
2019-04-13 17:11:15
machine/okinawa: init
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
1 parent b99b57d
Changed files (1)
machine/okinawa.nix
@@ -0,0 +1,54 @@
+{ config, pkgs, ... }:
+
+with import ../assets/machines.nix; {
+  imports = [ ./home.nix ];
+  boot = {
+    cleanTmpDir = true;
+  };
+  networking = {
+    firewall = {
+      allowPing = true;
+      allowedTCPPorts = [ 5000 ];
+    };
+  };
+  profiles = {
+    avahi.enable = true;
+    git.enable = true;
+    nix-config.buildCores = 4;
+    ssh.enable = true;
+    syncthing.enable = true;
+  };
+  services = {
+    nix-binary-cache = {
+      enable = true;
+      domain = "nix.cache.home";
+      aliases = ["cache.massimo.home" "nix.okinawa.home"];
+    };
+    coredns = {
+      enable = true;
+      names = dns;
+    };
+    athens = {
+      enable = true;
+      user = "vincent";
+    };
+    dockerRegistry = {
+      enable = true;
+      enableGarbageCollect = true;
+      listenAddress = "0.0.0.0";
+      extraConfig = {
+        proxy = {
+          remoteurl = "https://registry-1.docker.io";
+        };
+      };
+    };
+    syncthing-edge.guiAddress = "${wireguard.ips.okinawa}:8384";
+    wireguard = {
+      enable = true;
+      ips = [ "${wireguard.ips.okinawa}/24" ];
+      endpoint = wg.endpointIP;
+      endpointPort = wg.listenPort;
+      endpointPublicKey = wireguard.kerkouane.publicKey;
+    };
+  };
+}