nix-infra/hosts/dinictis/default.nix

83 lines
2.3 KiB
Nix
Raw Normal View History

{ pkgs, ... }: {
2024-05-04 11:01:27 +00:00
imports = [
../../profiles/desktop
2024-05-04 13:03:05 +00:00
./hardware-configuration.nix
2024-05-04 11:01:27 +00:00
];
2024-05-04 13:03:05 +00:00
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
networking.wireless.iwd.enable = true;
2024-05-04 13:03:05 +00:00
# Enable CUPS to print documents.
services.printing.enable = true;
home-manager.users.sammy.programs.ssh.includes = [
"./famedly-config"
];
home-manager.users.sammy.programs.git.includes = [
{
path = "~/famedly/.gitconfig";
condition = "gitdir:~/famedly/";
}
];
2024-05-15 11:22:58 +00:00
fileSystems."/mnt/Media" = {
device = "192.168.0.3:/mnt/user/Media";
fsType = "nfs";
options = [ "x-systemd.automount" "noauto" "x-systemd.idle-timeout=600" "noatime" ]; # disconnects after 10 minutes (i.e. 600 seconds)
};
2024-05-04 11:01:27 +00:00
system.stateVersion = "23.11"; # Did you read the comment?
2024-05-04 13:03:05 +00:00
# Famedly compliance foo - stolen from evelyn :3
systemd.user.services.usbguard-notifier.enable = true;
services.clamav = {
daemon = {
enable = true;
};
updater = {
enable = true;
frequency = 24;
interval = "hourly";
};
};
deployment.keys."osquery-secret.txt" = {
keyCommand = [ "pass" "work/osquery-secret" ];
destDir = "/etc/osquery/";
uploadAt = "pre-activation";
};
services.osquery = {
enable = true;
flags = {
tls_hostname = "fleet.famedly.de";
host_identifier = "instance";
enroll_secret_path = "/etc/osquery/osquery-secret.txt";
enroll_tls_endpoint = "/api/osquery/enroll";
config_plugin = "tls";
config_tls_endpoint = "/api/v1/osquery/config";
config_refresh = "10";
disable_distributed = "false";
distributed_plugin = "tls";
distributed_interval = "10";
distributed_tls_max_attempts = "3";
distributed_tls_read_endpoint = "/api/v1/osquery/distributed/read";
distributed_tls_write_endpoint = "/api/v1/osquery/distributed/write";
logger_plugin = "tls";
logger_tls_endpoint = "/api/v1/osquery/log";
logger_tls_period = "10";
disable_carver = "false";
carver_start_endpoint = "/api/v1/osquery/carve/begin";
carver_continue_endpoint = "/api/v1/osquery/carve/block";
carver_block_size = "2000000";
tls_server_certs = "/etc/ssl/certs/ca-certificates.crt";
};
};
2024-05-04 11:01:27 +00:00
}