pyrox.dev
1{
2 pkgs,
3 inputs,
4 ...
5}:
6{
7 disabledModules = [
8 "services/mail/stalwart-mail.nix"
9 ];
10 imports = [
11 "${inputs.nixpkgs-stalwart-fix}/nixos/modules/services/mail/stalwart-mail.nix"
12 # Machine-specific configurations.
13 ./bootloader.nix
14 ./firewall.nix
15 ./networking.nix
16 ./hardware.nix
17 ./packages.nix
18
19 # DN42 Services
20 ./dn42/default.nix
21
22 # Running Services
23 ./services/acme.nix
24 ./services/caddy.nix
25 ./services/fail2ban.nix
26 ./services/mailserver
27 ./services/prometheus.nix
28 ./services/secrets.nix
29 ./services/tailscale.nix
30 ];
31 fileSystems = {
32 "/" = {
33 fsType = "ext4";
34 device = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_21170924-part1";
35 };
36 };
37
38 nix.settings.max-jobs = 2;
39 nix.settings.cores = 2;
40
41 programs.fish.enable = true;
42 programs.fish.interactiveShellInit = ''
43 ${pkgs.direnv}/bin/direnv hook fish | source
44 '';
45 py = {
46 profiles.server.enable = true;
47 users.default.enable = true;
48 programs = {
49 fish.enable = true;
50 neovim.enable = true;
51 };
52 services.scrutiny.collector.enable = false;
53 };
54 security.tpm2.enable = false;
55 security.tpm2.abrmd.enable = false;
56}