24 lines
746 B
Nix
24 lines
746 B
Nix
{ config, pkgs, lib, inputs, ... }: with config.lyn.lib; {
|
|
imports =
|
|
[
|
|
./hardware-configuration.nix
|
|
./../../users/lyn
|
|
];
|
|
lyn.sops.secrets."hosts/forgejo-ci/forgejo_ci_token" = {};
|
|
lyn.kernel.latest.enable = true;
|
|
lyn.kernel.hardened.enable = true;
|
|
lyn.profiles.base.enable = true;
|
|
lyn.profiles.vm.enable = true;
|
|
lyn.services.forgejo-ci.enable = true;
|
|
lyn.services.forgejo-ci.domain = "git.shibe.pro";
|
|
lyn.services.forgejo-ci.instancename = "shibepro-ci";
|
|
# Use UEFI
|
|
boot.loader.systemd-boot.enable = true;
|
|
|
|
networking.hostName = "forgejo-ci"; # Define your hostname.
|
|
|
|
# Firewall stuff:
|
|
networking.firewall.enable = true;
|
|
networking.firewall.allowPing = true;
|
|
system.stateVersion = "23.05";
|
|
}
|