Generic commit
modules/sound: added jack and other stuff satori: kernel and pkg changes home/xmonad: some keybind changes emacs: some more configuration updates, this took me quite some time to configure but i dont see myself using it at all since neovim is still much much more efficient for me
This commit is contained in:
@@ -1,7 +1,44 @@
|
||||
{lib, config, pkgs, ... }:
|
||||
{ lib, config, pkgs, ... }:
|
||||
|
||||
{
|
||||
services = {
|
||||
/* openvpn.servers = {
|
||||
satori = {
|
||||
config = ''
|
||||
remote weirdnatto.in
|
||||
dev tun
|
||||
ifconfig 10.55.0.3 10.55.0.1
|
||||
secret /var/secrets/openvpn.key
|
||||
'';
|
||||
};
|
||||
};*/
|
||||
vault-agent = {
|
||||
enable = true;
|
||||
settings = {
|
||||
vault = {
|
||||
address = "https://10.55.0.2:8800";
|
||||
client_cert = "/var/vault/cert.pem";
|
||||
client_key = "/var/vault/key.pem";
|
||||
};
|
||||
auto_auth = {
|
||||
method = [
|
||||
{
|
||||
"cert" = {
|
||||
name = "Satori";
|
||||
};
|
||||
}
|
||||
];
|
||||
};
|
||||
template = [
|
||||
{
|
||||
source = pkgs.writeText "openvpn.tpl" ''
|
||||
{{ with secret "kv/openvpn" }}{{ .Data.data.secret }}{{ end }}
|
||||
'';
|
||||
destination = "/var/secrets/openvpn.key";
|
||||
}
|
||||
];
|
||||
};
|
||||
};
|
||||
tor.enable = true;
|
||||
logmein-hamachi.enable = true;
|
||||
openssh = {
|
||||
@@ -18,18 +55,18 @@
|
||||
};
|
||||
};
|
||||
systemd.services = {
|
||||
tor.wantedBy = lib.mkForce [];
|
||||
mysql.wantedBy = lib.mkForce [];
|
||||
logmein-hamachi.wantedBy = lib.mkForce [];
|
||||
openssh.wantedBy = lib.mkForce [];
|
||||
tor.wantedBy = lib.mkForce [ ];
|
||||
mysql.wantedBy = lib.mkForce [ ];
|
||||
logmein-hamachi.wantedBy = lib.mkForce [ ];
|
||||
openssh.wantedBy = lib.mkForce [ ];
|
||||
#printing.wantedBy = lib.mkForce [];
|
||||
#vault.wantedBy = lib.mkForce [];
|
||||
};
|
||||
security.pki.certificateFiles = [ ../../cert.pem ];
|
||||
/* virtualisation.libvirtd = {
|
||||
/* virtualisation.libvirtd = {
|
||||
enable = true;
|
||||
onBoot = "ignore";
|
||||
onShutdown = "shutdown";
|
||||
qemuRunAsRoot = false;
|
||||
};*/
|
||||
};*/
|
||||
}
|
||||
|
Reference in New Issue
Block a user