rice/hosts/ami/default.nix

{
  pkgs,
  agenix,
  disko,
  ...
}: {
  imports = [
    ./system.nix
    agenix.nixosModules.default
    disko.nixosModules.disko

    ./404.nix
    ./acme.nix
    ./bitwarden.nix
    ./borg.nix
    ./disk-config.nix
    ./forgejo.nix
    ./msmtp.nix
    ./murmur.nix
    ./nginx.nix
    ./upgrade.nix

    ../../users/maintainer
  ];

  age.identityPaths = ["/root/.ssh/id_agenix"];

  users = {
    mutableUsers = false;
    users.root.hashedPassword = "!";
  };

  environment.systemPackages = with pkgs; [
    git
    htop
    neovim
    tree
  ];

  services.syncthing.enable = true;
}
add tara config 2024-01-25 15:54:05 +00:00			`{`
			`pkgs,`
			`agenix,`
feat: migrate tara to ami 2024-03-29 20:56:26 +00:00			`disko,`
add tara config 2024-01-25 15:54:05 +00:00			`...`
			`}: {`
			`imports = [`
			`./system.nix`
			`agenix.nixosModules.default`
feat: migrate tara to ami 2024-03-29 20:56:26 +00:00			`disko.nixosModules.disko`
add tara config 2024-01-25 15:54:05 +00:00
feat: get proper 404 This is admittedly super hacky, because it uses an unused subdomain, invalid certs, and actually just directs somewhere that doesn't exist, but it kinda works, and going on a weird subdomain at least doesn't redirect to bitwarden. 2024-04-19 20:44:42 +00:00			`./404.nix`
add tara config 2024-01-25 15:54:05 +00:00			`./acme.nix`
			`./bitwarden.nix`
			`./borg.nix`
feat: migrate tara to ami 2024-03-29 20:56:26 +00:00			`./disk-config.nix`
			`./forgejo.nix`
feat(ami): set up msmtp to send email through forgejo later on Currently not working as Hetzner is blocking the relevant ports. 2024-05-02 10:51:56 +00:00			`./msmtp.nix`
refactor: move repeated nginx snippets into one file 2024-06-05 09:31:12 +00:00			`./murmur.nix`
			`./nginx.nix`
feat: auto upgrade ami 2024-05-05 20:32:10 +00:00			`./upgrade.nix`
add tara config 2024-01-25 15:54:05 +00:00
			`../../users/maintainer`
			`];`

feat: get proper 404 This is admittedly super hacky, because it uses an unused subdomain, invalid certs, and actually just directs somewhere that doesn't exist, but it kinda works, and going on a weird subdomain at least doesn't redirect to bitwarden. 2024-04-19 20:44:42 +00:00			`age.identityPaths = ["/root/.ssh/id_agenix"];`
add tara config 2024-01-25 15:54:05 +00:00
			`users = {`
			`mutableUsers = false;`
			`users.root.hashedPassword = "!";`
			`};`

			`environment.systemPackages = with pkgs; [`
			`git`
			`htop`
			`neovim`
			`tree`
			`];`
feat(ami): set up syncthing 2024-04-22 09:36:13 +00:00
			`services.syncthing.enable = true;`
add tara config 2024-01-25 15:54:05 +00:00			`}`