flake/systems/mottarone/default.nix

95 lines
1.8 KiB
Nix

{
lib,
pkgs,
camascaPkgs,
...
}:
{
imports = [
./urbackup.nix
];
boot.blacklistedKernelModules = [ "kvm_intel" ];
environment.systemPackages = with pkgs; [
gtkterm
remmina
camascaPkgs.openwebstart
camascaPkgs.jaspersoft-studio-community
camascaPkgs.sql-developer
pycharm-wrapped
recaf-launcher
];
fonts.packages = with pkgs; [
corefonts
vistafonts
];
i18n.defaultLocale = lib.mkForce "fr_FR.UTF-8";
hj = {
".gitconfig".text = lib.mkAfter (
lib.generators.toGitINI {
include.path = "~/.config/git/work_config";
}
);
".ssh/config".text = lib.mkBefore ''
Include work_config
'';
};
networking = {
firewall.allowedTCPPorts = [ 8000 ];
networkmanager.dispatcherScripts = [
{
type = "basic";
source = pkgs.writeShellScript "vpnUpHook" ''
if [ "$2" == "vpn-up" ]; then
resolvectl default-route tun0 true
logger "Set default-route to tun0"
fi
'';
}
];
};
services = {
resolved = {
dnssec = "allow-downgrade";
dnsovertls = "false";
};
glpiAgent = {
enable = true;
settings = {
server = "https://assistance.sciencespo-lyon.fr";
delaytime = 3600;
lazy = 0;
logger = "stderr";
};
};
postgresql = {
enable = true;
authentication = ''
local all postgres peer
local all leo peer
local all all md5
'';
};
pgadmin = {
enable = true;
initialEmail = "hi@uku.moe";
initialPasswordFile = "/opt/pgadminpwd";
};
};
systemd.tmpfiles.rules = [
"L+ /opt/liberica-17 - - - - ${camascaPkgs.liberica-17}"
];
programs.virt-manager.enable = lib.mkForce false;
virtualisation.libvirtd.enable = lib.mkForce false;
}