hosts/suwako: init

Signed-off-by: Amneesh Singh <natto@weirdnatto.in>
2024-10-20 15:59:58 +05:30
parent eac8c77797
commit 5e54dfded8
10 changed files with 143 additions and 0 deletions
--- a/hosts/suwako/services.nix
+++ b/hosts/suwako/services.nix
@@ -0,0 +1,24 @@
+{ config, pkgs, lib, conf, ... }:
+let
+  domain = conf.network.addresses.domain.natto;
+in
+{
+  services = {
+    cron.enable = true;
+
+    openssh = {
+      enable = true;
+      settings.PermitRootLogin = "yes";
+      ports = [ 22 ];
+    };
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    certs = lib.mapAttrs (n: _: { email = "natto@${domain}"; })
+      (lib.filterAttrs (_: v: v.enableACME) config.services.nginx.virtualHosts);
+  };
+
+  security.pki.certificateFiles = [ ../../cert.pem ];
+}
+