Summary Files Commits Branches @commit @diff @stats
path: root / modules / server / default.nix
blob: c03a2da355f7d72ccf40751e9359b6a37007d744 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
{ pkgs, ... }: {
  environment.systemPackages = with pkgs; [
    networkmanager
  ];

  #
  # Kernel
  #

  boot.kernelModules = [ "kvm-intel" ];

  #
  # Bootloader
  #

  boot.loader = {
    grub = {
      enable = true;
      copyKernels = true;
      efiSupport = true;
      efiInstallAsRemovable = true;
      # Define on which hard drive you want to install Grub
      device = "nodev"; # or "nodev" for efi only
    };
    timeout = 1;
  };

  #
  # Timezone and locale
  #

  # Set your time zone.
  time.timeZone = "Europe/Sofia";
  # Select internationalisation properties.
  i18n.defaultLocale = "en_US.UTF-8";

  #
  # Networking
  #

  networking = {
    networkmanager.enable = true;
    firewall.allowedTCPPorts = [ 2200 ];
  };

  # zeroconf networking
  services.avahi = {
    enable = true;
    nssmdns4 = true;
    openFirewall = true;
  };

  services.openssh = {
    enable = true;
    ports = [ 2200 ];
    settings = {
      PasswordAuthentication = true;
      AllowUsers = [ "root" "admin" ];
      UseDns = true;
      X11Forwarding = true;
      PermitRootLogin = "prohibit-password";
    };
  };
}