{ inputs, lib, pkgs, ... }: { imports = [ # If you want to use modules your own flake exports (from modules/home-manager): # outputs.homeManagerModules.example # outputs.nixosModules.contabo.wan inputs.home-manager.nixosModules.home-manager # Or modules exported from other flakes (such as nix-colors): # inputs.nix-colors.homeManagerModules.default # You can also split up your configuration and import pieces of it here: # ./nvim.nix ./hardware-configuration.nix # Import shared settings ../../shared # Import server settings ../../server # Import disko # ../../../disko/queen ]; zramSwap.enable = false; services = { openssh = { enable = true; settings = { # require public key authentication for better security PasswordAuthentication = false; KbdInteractiveAuthentication = false; PermitRootLogin = "no"; }; }; }; nixpkgs = { # You can add overlays here overlays = [ ]; # Configure your nixpkgs instance config = { allowBroken = true; # Disable if you don't want unfree packages allowUnfree = true; }; }; environment.systemPackages = with pkgs; [ fzf matrix-conduit docker docker-compose gitea gotosocial alejandra exiftool imagemagick ffmpeg #aria2 #jellyfin #jellyfin-web #jellyfin-ffmpeg nextcloud28 nginx onlyoffice-documentserver openssl phanpy postgresql_16 python310 python310Packages.nbconvert jupyter rabbitmq-server roundcube roundcubePlugins.contextmenu roundcubePlugins.carddav roundcubePlugins.custom_from roundcubePlugins.persistent_login roundcubePlugins.thunderbird_labels youtube-dl sqlite rocksdb ]; networking = { domain = ""; # Create an auto-update systemd service that runs every day # system.autoUpgrade = { # flake = "git+https://git.lillianviolet.dev/Lillian-Violet/NixOS-Config.git"; # dates = "daily"; # enable = true; # }; # systemd.services.systemd-networkd.serviceConfig.Environment = "SYSTEMD_LOG_LEVEL=debug"; # Enable networking # networking.networkmanager.enable = true; # networking.nat.enable = true; # networking.nat.internalInterfaces = ["ve-+"]; # networking.nat.externalInterface = "ens18"; enableIPv6 = lib.mkForce true; nameservers = ["2a02:c207::1:53" "2a02:c207::2:53"]; # networking.interfaces.ens18.ipv4.addresses = [ # { # address = "62.171.160.195"; # prefixLength = 32; # } # ]; interfaces.ens18.ipv6.addresses = [ { address = "2a02:c207:2063:2448::1"; prefixLength = 64; } ]; defaultGateway6 = { address = "fe80::1"; interface = "ens18"; }; firewall = { # Open ports in the firewall. enable = true; allowPing = false; allowedTCPPorts = [ 22 # SSH 5349 # STUN tls 5350 # STUN tls alt 80 # http 443 # https ]; allowedUDPPortRanges = [ { from = 49152; to = 49999; } # TURN relay ]; }; hostName = "queen"; }; # networking.useNetworkd = true; # networking.useDHCP = false; # modules.contabo.wan = { # enable = true; # macAddress = "00:50:56:43:01:e2"; # changeme # ipAddresses = [ # "192.0.2.0/32" # "2001:db8::1/64" # ]; # }; # Set your time zone. time.timeZone = "Europe/Amsterdam"; programs.git = { enable = true; }; security.acme = { acceptTerms = true; defaults.email = "letsencrypt@gladtherescake.eu"; }; # users.groups.virtualMail = {}; # Enable completion of system packages by zsh environment.pathsToLink = ["/share/zsh"]; boot = { tmp.cleanOnBoot = true; loader.grub = { enable = true; configurationLimit = 3; }; loader.efi.canTouchEfiVariables = true; }; # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion system.stateVersion = "24.11"; }