nixos/hosts/microserver.parents.ts.hillion.co.uk/default.nix
Jake Hillion eb72b6e468
All checks were successful
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
switch to agenix for secrets
2022-11-25 11:52:28 +00:00

32 lines
828 B
Nix

{ config, pkgs, lib, ... }:
{
config.system.stateVersion = "22.05";
config.networking.hostName = "microserver";
config.networking.domain = "parents.ts.hillion.co.uk";
imports = [
./hardware-configuration.nix
../../modules/common/default.nix
];
config.boot.loader.grub.enable = false;
config.boot.loader.raspberryPi = {
enable = true;
version = 4;
};
# Networking
## Tailscale
config.tailscaleAdvertiseRoutes = "10.0.0.0/24";
config.age.secrets."tailscale/microserver.parents.ts.hillion.co.uk".file = ../../secrets/tailscale/microserver.parents.ts.hillion.co.uk.age;
config.tailscalePreAuth = config.age.secrets."tailscale/microserver.parents.ts.hillion.co.uk".path;
## Enable IP forwarding for Tailscale
config.boot.kernel.sysctl = {
"net.ipv4.ip_forward" = true;
};
}