diff --git a/machines/nuage/default.nix b/machines/nuage/default.nix deleted file mode 100644 index 312223e..0000000 --- a/machines/nuage/default.nix +++ /dev/null @@ -1,153 +0,0 @@ -{ - config, - pkgs, - inputs, - profiles, - ... -}: - -{ - imports = [ - ./hardware.nix - ./home-julien.nix - ]; - - machine.meta = { - arch = "x86_64-linux"; - nixpkgs_version = inputs.nixpkgs; - hm_version = inputs.home-manager; - profiles = with profiles; [ - vm-simple-network - server - behind-sniproxy - ]; - ips = { - public.ipv4 = "82.67.34.230"; - local.ipv4 = "192.168.0.101"; - vpn.ipv4 = "100.100.45.28"; - public.ipv6 = "2a01:e0a:de4:a0e1:95c9:b2e2:e999:1a45"; - vpn.ipv6 = "fd7a:115c:a1e0::1c"; - }; - }; - - boot.loader.grub.enable = true; - boot.loader.grub.device = "/dev/sda"; - boot.loader.grub.useOSProber = true; - - deployment.tags = [ "server" ]; - - luj.nginx.enable = true; - - services.mysql.enable = true; - services.mysql.package = pkgs.mariadb; - services.nextcloud = { - enable = true; - package = pkgs.nextcloud30; - https = true; - hostName = "nuage.malka.family"; - settings.overwriteProtocol = "https"; - config = { - dbtype = "mysql"; - dbuser = "test"; - dbhost = "localhost"; # nextcloud will add /.s.PGSQL.5432 by itself - dbname = "nuage"; - dbpassFile = "/srv/nextclouddbpass"; - adminpassFile = "/srv/nextcloudadminpass"; - - adminuser = "admin"; - }; - }; - - virtualisation = { - podman = { - enable = true; - - defaultNetwork.settings = { - dns_enable = true; - ipv6_enabled = true; - }; - }; - }; - - virtualisation.oci-containers = { - containers.collabora = { - image = "collabora/code"; - imageFile = pkgs.dockerTools.pullImage { - imageName = "collabora/code"; - imageDigest = "sha256:07da8a191b37058514dfdf921ea8c2270c6634fa659acee774cf8594f86950e4"; - sha256 = "sha256-5oaz07NQScHUVN/HznzZGQ2bGrU/V1GhI+9btXHz0GM="; - }; - ports = [ "9980:9980" ]; - environment = { - domain = "nuage.malka.family"; - extra_params = "--o:ssl.enable=false --o:ssl.termination=true --o:remote_font_config.url=https://cloud.dgnum.eu/apps/richdocuments/settings/fonts.json"; - }; - extraOptions = [ - "--network=host" - "--cap-add" - "MKNOD" - "--cap-add" - "SYS_ADMIN" - ]; - }; - }; - - services.nginx.virtualHosts = { - - "collabora.luj.fr" = { - forceSSL = true; - enableACME = true; - - extraConfig = '' - # static files - location ^~ /browser { - proxy_pass http://127.0.0.1:9980; - proxy_set_header Host $host; - } - - # WOPI discovery URL - location ^~ /hosting/discovery { - proxy_pass http://127.0.0.1:9980; - proxy_set_header Host $host; - } - - # Capabilities - location ^~ /hosting/capabilities { - proxy_pass http://127.0.0.1:9980; - proxy_set_header Host $host; - } - - # main websocket - location ~ ^/cool/(.*)/ws$ { - proxy_pass http://127.0.0.1:9980; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "Upgrade"; - proxy_set_header Host $host; - proxy_read_timeout 36000s; - } - - # download, presentation and image upload - location ~ ^/(c|l)ool { - proxy_pass http://127.0.0.1:9980; - proxy_set_header Host $host; - } - - # Admin Console websocket - location ^~ /cool/adminws { - proxy_pass http://127.0.0.1:9980; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "Upgrade"; - proxy_set_header Host $host; - proxy_read_timeout 36000s; - } - ''; - }; - }; - - services.nginx.virtualHosts.${config.services.nextcloud.hostName} = { - forceSSL = true; - enableACME = true; - }; - - system.stateVersion = "22.05"; -} diff --git a/machines/nuage/hardware.nix b/machines/nuage/hardware.nix deleted file mode 100644 index 36f9f8c..0000000 --- a/machines/nuage/hardware.nix +++ /dev/null @@ -1,38 +0,0 @@ -{ - config, - lib, - modulesPath, - ... -}: - -{ - imports = [ (modulesPath + "/profiles/qemu-guest.nix") ]; - - boot.initrd.availableKernelModules = [ - "ata_piix" - "uhci_hcd" - "virtio_pci" - "virtio_scsi" - "sd_mod" - "sr_mod" - ]; - boot.initrd.kernelModules = [ ]; - boot.kernelModules = [ ]; - boot.extraModulePackages = [ ]; - - fileSystems."/" = { - device = "/dev/disk/by-uuid/7b68596b-75f2-457f-a43c-7b39a2f08437"; - fsType = "ext4"; - }; - - swapDevices = [ ]; - - # Enables DHCP on each ethernet and wireless interface. In case of scripted networking - # (the default) this is the recommended approach. When using systemd-networkd it's - # still possible to use this option, but it's recommended to use it in conjunction - # with explicit per-interface declarations with `networking.interfaces..useDHCP`. - networking.useDHCP = lib.mkDefault true; - # networking.interfaces.ens18.useDHCP = lib.mkDefault true; - - hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; -} diff --git a/machines/nuage/home-julien.nix b/machines/nuage/home-julien.nix deleted file mode 100644 index 60eb43a..0000000 --- a/machines/nuage/home-julien.nix +++ /dev/null @@ -1 +0,0 @@ -_: { luj.hmgr.julien = { }; }