/ hosts / tenshin / default.nix
default.nix
 1  { ... }:
 2  {
 3    networking.hostName = "tenshin";
 4  
 5    imports = [
 6      ./modules/cyberchef.nix
 7      ./modules/ittools.nix
 8      ./modules/caddy.nix
 9      ./modules/ntp.nix
10    ];
11  
12    hosts.caddy.enable = true;
13    hosts.cyberchef.enable = true;
14    hosts.it-tools.enable = true;
15    hosts.prometheus.enable = true;
16    hosts.ntp.enable = true;
17  
18    hosts.auditd.enable = false;
19    nix-mineral.enable = false;
20  
21    hosts.borg = {
22      enable = true;
23      repository = "ssh://aebp8i08@aebp8i08.repo.borgbase.com/./repo";
24    };
25  
26    hosts.openssh = {
27      enable = true;
28      allowUsers = [
29        "*@100.64.0.0/10"
30        "*@10.30.0.0/24"
31      ];
32    };
33  
34    nix.settings.trusted-users = [ "martijn" ]; # allows for remote push
35  
36    # Enable tailscale network
37    hosts.tailscale.enable = true;
38  
39    # Server defaults
40    hosts.server.enable = true;
41  }