ajout header + utilisation

extraction-donnees-privees
Jean-Pierre PRUNARET 9 years ago
parent c5b7c16946
commit 326da0f7e8

@ -1,8 +1,12 @@
{ config, pkgs, ... }:
{
with pkgs.lib;
let
cfg = config.r6d.config-generator;
in {
# Automatic update & automatic clean
system.autoUpgrade.enable = config.r6d.config-generator.auto-upgrade;
nix.gc.automatic = config.r6d.config-generator.auto-upgrade;
system.autoUpgrade.enable = cfg.auto-upgrade;
nix.gc.automatic = cfg.auto-upgrade;
}

@ -1,9 +1,13 @@
{ config, pkgs, ... }:
{
with pkgs.lib;
let
cfg = config.r6d.config-generator;
in {
# Gestion de fail2ban
services = pkgs.lib.mkIf config.r6d.config-generator.fail2ban {
services = mkIf cfg.fail2ban {
fail2ban = {
enable = true;
jails = {

@ -1,6 +1,10 @@
{ config, pkgs, ... }:
{
with pkgs.lib;
let
cfg = config.r6d.config-generator;
in {
# Gestion spécifique pour PC portable
powerManagement.cpuFreqGovernor = pkgs.lib.mkIf config.r6d.config-generator.laptop "powersave";
powerManagement.cpuFreqGovernor = mkIf cfg.laptop "powersave";
}

@ -1,11 +1,15 @@
{ config, pkgs, ... }:
{
with pkgs.lib;
let
cfg = config.r6d.config-generator;
in {
imports = [
];
services.locate = {
enable = config.r6d.config-generator.locate;
enable = cfg.locate;
interval = "hourly";
};
}

@ -1,7 +1,9 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge;
profiles = config.r6d.profiles;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
in {
nix = mkIf config.r6d.config-generator.nix-serve-client {

@ -1,8 +1,12 @@
{ config, pkgs, ... }:
{
with pkgs.lib;
let
cfg = config.r6d.config-generator;
in {
# Cache http pour le store
services.nix-serve.enable = config.r6d.config-generator.nix-serve-server;
networking.firewall.allowedTCPPorts = pkgs.lib.mkIf config.r6d.config-generator.nix-serve-server [ 5000 ];
services.nix-serve.enable = cfg.nix-serve-server;
networking.firewall.allowedTCPPorts = mkIf cfg.nix-serve-server [ 5000 ];
}

@ -1,8 +1,12 @@
{ config, pkgs, ... }:
{
with pkgs.lib;
let
cfg = config.r6d.config-generator;
in {
# Enable CUPS to print documents.
services.printing = pkgs.lib.mkIf config.r6d.config-generator.print {
services.printing = mkIf cfg.print {
enable = true;
drivers = [
pkgs.samsung-unified-linux-driver

@ -1,10 +1,14 @@
{ config, pkgs, ... }:
{
with pkgs.lib;
let
cfg = config.r6d.config-generator;
in {
# Gestion du swap
# https://en.wikipedia.org/wiki/Swappiness
boot.kernel.sysctl = pkgs.lib.mkIf config.r6d.config-generator.swap {
boot.kernel.sysctl = mkIf cfg.swap {
# le swap est activé (!= 0)
# le swap est utilisé lorsque (100 - x) % de la mémoire est déja allouée
"vm.swappiness" = 10;

@ -1,12 +1,15 @@
{ config, pkgs, ... }:
with pkgs.lib;
let
cfg = config.r6d.config-generator;
profiles = config.r6d.profiles;
in {
security.sudo.wheelNeedsPassword = !(profiles.isPrunetwork && profiles.isServer);
users.extraUsers.jpierre03 = pkgs.lib.mkIf profiles.isPrunetwork
users.extraUsers.jpierre03 = mkIf profiles.isPrunetwork
{ isNormalUser = true;
createHome = true;
home = "/home/jpierre03";

Loading…
Cancel
Save