53 lines
1 KiB
Nix
53 lines
1 KiB
Nix
{
|
|
config,
|
|
pkgs,
|
|
lib,
|
|
imports,
|
|
...
|
|
}:
|
|
let
|
|
tailscaleMagicDNS = "neon-dory.ts.net";
|
|
p = import ../parameters.nix;
|
|
in
|
|
{
|
|
|
|
age.secrets = {
|
|
authentik-env.file = ../../secrets/authentik-env.age;
|
|
tailscale-authKey.file = ../../secrets/tailscale-authKey.age;
|
|
};
|
|
|
|
my = {
|
|
utils = {
|
|
commons.enable = true;
|
|
lxc-standard.enable = true;
|
|
};
|
|
|
|
networking = {
|
|
tailscale = {
|
|
enable = true;
|
|
magicDNSDomain = tailscaleMagicDNS;
|
|
authKeyFile = config.age.secrets.tailscale-authKey.path;
|
|
};
|
|
};
|
|
|
|
services.authentik = {
|
|
enable = true;
|
|
envFile = config.age.secrets.authentik-env.path;
|
|
email = {
|
|
host = "smtp.eu.mailgun.org";
|
|
port = 587;
|
|
username = "auth@pazpi.top";
|
|
use_tls = true;
|
|
use_ssl = false;
|
|
from = "auth@pazpi.top";
|
|
};
|
|
proxy.domain = p.domains.public;
|
|
};
|
|
virtualisation.proxmox.enable = true;
|
|
};
|
|
|
|
# Extra packages
|
|
environment.systemPackages = with pkgs; [ ];
|
|
|
|
system.stateVersion = "24.11";
|
|
}
|