rice/hosts/ami/default.nix

{
  pkgs,
  agenix,
  disko,
  ...
}: {
  imports = [
    ./system.nix
    agenix.nixosModules.default
    disko.nixosModules.disko

    ./404.nix
    ./acme.nix
    ./bitwarden.nix
    ./borg.nix
    ./disk-config.nix
    ./forgejo.nix
    ./keycloak.nix
    ./murmur.nix
    ./msmtp.nix
    ./upgrade.nix
    ./website.nix

    ../../users/maintainer
  ];

  age.identityPaths = ["/root/.ssh/id_agenix"];

  users = {
    mutableUsers = false;
    users.root.hashedPassword = "!";
  };

  environment.systemPackages = with pkgs; [
    git
    htop
    neovim
    tree
  ];

  services.syncthing.enable = true;
}
add tara config 2024-01-25 15:54:05 +00:00			`{`
			`pkgs,`
			`agenix,`
feat: migrate tara to ami 2024-03-29 20:56:26 +00:00			`disko,`
add tara config 2024-01-25 15:54:05 +00:00			`...`
			`}: {`
			`imports = [`
			`./system.nix`
			`agenix.nixosModules.default`
feat: migrate tara to ami 2024-03-29 20:56:26 +00:00			`disko.nixosModules.disko`
add tara config 2024-01-25 15:54:05 +00:00
feat: get proper 404 This is admittedly super hacky, because it uses an unused subdomain, invalid certs, and actually just directs somewhere that doesn't exist, but it kinda works, and going on a weird subdomain at least doesn't redirect to bitwarden. 2024-04-19 20:44:42 +00:00			`./404.nix`
add tara config 2024-01-25 15:54:05 +00:00			`./acme.nix`
			`./bitwarden.nix`
			`./borg.nix`
feat: migrate tara to ami 2024-03-29 20:56:26 +00:00			`./disk-config.nix`
			`./forgejo.nix`
feat: setup keycloak 2024-05-25 15:19:54 +00:00			`./keycloak.nix`
feat(ami): set up murmur 2024-05-01 12:30:23 +00:00			`./murmur.nix`
feat(ami): set up msmtp to send email through forgejo later on Currently not working as Hetzner is blocking the relevant ports. 2024-05-02 10:51:56 +00:00			`./msmtp.nix`
feat: auto upgrade ami 2024-05-05 20:32:10 +00:00			`./upgrade.nix`
add tara config 2024-01-25 15:54:05 +00:00			`./website.nix`

			`../../users/maintainer`
			`];`

feat: get proper 404 This is admittedly super hacky, because it uses an unused subdomain, invalid certs, and actually just directs somewhere that doesn't exist, but it kinda works, and going on a weird subdomain at least doesn't redirect to bitwarden. 2024-04-19 20:44:42 +00:00			`age.identityPaths = ["/root/.ssh/id_agenix"];`
add tara config 2024-01-25 15:54:05 +00:00
			`users = {`
			`mutableUsers = false;`
			`users.root.hashedPassword = "!";`
			`};`

			`environment.systemPackages = with pkgs; [`
			`git`
			`htop`
			`neovim`
			`tree`
			`];`
feat(ami): set up syncthing 2024-04-22 09:36:13 +00:00
			`services.syncthing.enable = true;`
add tara config 2024-01-25 15:54:05 +00:00			`}`