94 lines
2.3 KiB
Nix
94 lines
2.3 KiB
Nix
{ config, pkgs, inputs, modulesPath, ... }:
|
|
|
|
let
|
|
sshKeys = import ../ssh_keys.nix;
|
|
in
|
|
{
|
|
networking.hostName = "goldman"; # Define your hostname.
|
|
nixpkgs.hostPlatform = { system = "aarch64-linux"; };
|
|
|
|
imports =
|
|
[
|
|
inputs.gatekeeper.nixosModules.gatekeeper
|
|
../modules/malobeo_user.nix
|
|
#inputs.nixos-hardware.nixosModules.raspberry-pi-3
|
|
(modulesPath + "/profiles/minimal.nix")
|
|
#(modulesPath + "/installer/sd-card/sd-image.nix")
|
|
];
|
|
|
|
fileSystems."/" =
|
|
{ device = "/dev/disk/by-label/NIXOS_SD";
|
|
fsType = "ext4";
|
|
};
|
|
|
|
#Try to reduce size
|
|
documentation.man.enable = false;
|
|
documentation.nixos.enable = false;
|
|
|
|
services.openssh.enable = true;
|
|
services.openssh.ports = [ 22 ];
|
|
services.openssh.settings.PasswordAuthentication = false;
|
|
services.openssh.settings.PermitRootLogin = "prohibit-password";
|
|
users.users.root.openssh.authorizedKeys.keys = sshKeys.admins;
|
|
|
|
# Use the extlinux boot loader. (NixOS wants to enable GRUB by default)
|
|
boot.loader.grub.enable = false;
|
|
|
|
# Enables the generation of /boot/extlinux/extlinux.conf
|
|
boot.loader.generic-extlinux-compatible.enable = true;
|
|
|
|
networking.dhcpcd.enable = true;
|
|
|
|
# Set your time zone.
|
|
time.timeZone = "Europe/Berlin";
|
|
|
|
services.mosquitto = {
|
|
enable = true;
|
|
listeners = [{
|
|
acl = [ "pattern readwrite #" ];
|
|
omitPasswordAuth = true;
|
|
settings.allow_anonymous = true;
|
|
}];
|
|
};
|
|
|
|
services = {
|
|
gatekeeper = {
|
|
enable = true;
|
|
envFile = pkgs.writeText "env" ''
|
|
MIFARE_APP_MASTER_KEY="7b195adb892073c9e34ebe7e0ca28b2b"
|
|
MIFARE_ACL_READ_BASE_KEY="741a50f2b189cc9f151e0600f50a6e1a"
|
|
MIFARE_ACL_WRITE_BASE_KEY="f1aa99f81cca268de98d422ee0ccb65c"
|
|
SECRET_KEY="8b14d0b447bff7efa24d5019cc59a999786e31f6f865173bbd642bf18de5ad85"
|
|
MQTT_HOST = "localhost"
|
|
MQTT_PORT = "1883"
|
|
'';
|
|
mock = "False";
|
|
};
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
htop
|
|
wget
|
|
git
|
|
pciutils
|
|
gpio-utils
|
|
nix-tree
|
|
lgpio
|
|
];
|
|
|
|
services.avahi = {
|
|
enable = true;
|
|
nssmdns4 = true;
|
|
publish = {
|
|
enable = true;
|
|
addresses = true;
|
|
userServices = true;
|
|
};
|
|
};
|
|
|
|
networking.firewall.allowedTCPPorts = [ 80 443 1883];
|
|
|
|
system.stateVersion = "23.05";
|
|
}
|
|
|