nixos-config
/
nixos-template-base
4
0
Fork 0
Code Issues 7 Pull Requests Releases Activity

application du template

Browse Source
extraction-donnees-privees
Jean-Pierre PRUNARET 9 years ago
parent 1cce1ec034
commit ea307cc5dc
41 changed files with 215 additions and 88 deletions
Show Stats Download Patch File Download Diff File

9
base.nix
Unescape Escape View File

@ -1,4 +1,11 @@
{ ... }:
{ config, lib, pkgs, ... }:
let
#inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
{
imports = [

5
base/activation-manuelle/nix-serve-client.nix
Unescape Escape View File

@ -1,13 +1,14 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge;
profiles = config.r6d.profiles;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf cfg.nix-serve-client {
nix = {
# Cache http pour le store
requireSignedBinaryCaches = false;

27
base/activation-manuelle/nix-serve-server.nix
Unescape Escape View File

@ -1,12 +1,27 @@
{ config, pkgs, ... }:
with pkgs.lib;
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
in {
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf cfg.nix-serve-server {
# Cache http pour le store
services.nix-serve.enable = cfg.nix-serve-server;
networking.firewall.allowedTCPPorts = mkIf cfg.nix-serve-server [ 5000 ];
# Services
services.nix-serve = {
enable = true;
};
# Réseau
networking.firewall = {
allowedTCPPorts = [
5000
];
allowedUDPPorts = [
];
};
}

15
base/activation-manuelle/service-fail2ban.nix
Unescape Escape View File

@ -1,17 +1,20 @@
{ config, pkgs, ... }:
with pkgs.lib;
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
ignoreip = "pedro.dubronetwork.fr cube.dubronetwork.fr voyage.prunetwork.fr xray.prunetwork.fr 192.168.0.0/16 172.16.0.0/16";
destemail = "admins@dubronetwork.fr";
in
mkIf cfg.fail2ban {
in {
# Gestion de fail2ban
services = mkIf cfg.fail2ban {
# Services
services = {
fail2ban = {
enable = true;
jails = {

6
base/activation-manuelle/users.nix
Unescape Escape View File

@ -1,9 +1,9 @@
{ config, pkgs, ... }:
with pkgs.lib;
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
# Dubronetwork

9
base/base.nix
Unescape Escape View File

@ -1,4 +1,11 @@
{ config, pkgs, ... }:
{ config, lib, pkgs, ... }:
let
#inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
{
imports = [

12
base/network-dns.nix
Unescape Escape View File

@ -1,6 +1,14 @@
{ config, pkgs, ... }:
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf true {
{
# Définition des domaines utilisés lorsque un identifiant non-FQDN est donné (ping, nslookup)
networking = {
search = [

1
config-generator.nix
Unescape Escape View File

@ -1,6 +1,5 @@
{ config, lib, pkgs, ... }:
# exemple utilisé pour commencer bird.nix
let
inherit (lib) mkEnableOption mkIf mkMerge mkOption singleton types;
cfg = config.r6d.config-generator;

10
desktop/activation-manuelle/xmonad/xmonad.nix
Unescape Escape View File

@ -1,19 +1,21 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
in mkIf cfg.xmonad {
# Paquets spécifiques pour xmonad
mkIf cfg.xmonad {
environment.systemPackages = with pkgs;[
# Paquets
environment.systemPackages = with pkgs; [
dmenu
haskellPackages.xmobar
];
# Services
services.xserver.windowManager.xmonad = {
enable = true;
enableContribAndExtras = true;

1
desktop/desktop.nix
Unescape Escape View File

@ -13,6 +13,7 @@ in
./activation-manuelle/xmonad/xmonad.nix # gestionnaire de fenêtres xmonad
];
# Paquets
environment.systemPackages = with pkgs; mkIf profiles.isDesktop [
# Environement de bureau
arandr # interface graphique pour xrandr

3
public/app-adminsys.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,6 +9,7 @@ in
mkIf profiles.isDesktop {
# Paquets
environment.systemPackages = with pkgs; [
# Adminsys
iotop

2
public/app-awesome.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;

3
public/app-bureautique.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,6 +9,7 @@ in
mkIf profiles.isDesktop {
# Paquets
environment.systemPackages = with pkgs; [
# Bureautique
aspell aspellDicts.fr

5
public/app-cao.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,7 +9,8 @@ in
mkIf cfg.conception-assistee {
environment.systemPackages = with pkgs; [
# Paquets
environment.systemPackages = with pkgs; [
# CAO
## Modélisation 3D
freecad # modélisation de pièces en 3D

3
public/app-cartographie.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,6 +9,7 @@ in
mkIf cfg.cartographie {
# Paquets
environment.systemPackages = with pkgs; [
# Gestion de données géographiques
expat

3
public/app-client-internet.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,6 +9,7 @@ in
mkIf profiles.isDesktop {
# Paquets
environment.systemPackages = with pkgs; [
# Clients Internet

3
public/app-developpement.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,6 +9,7 @@ in
mkIf cfg.developpement {
# Paquets
environment.systemPackages = with pkgs; [
# Base de données
pgadmin

3
public/app-docker.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,6 +9,7 @@ in
mkIf cfg.docker {
# Paquets
environment.systemPackages = with pkgs; [
# Ecosystème Docker
docker

5
public/app-edition-musique.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,7 +9,8 @@ in
mkIf cfg.edition-musique {
environment.systemPackages = with pkgs; [
# Paquets
environment.systemPackages = with pkgs; [
#
audacity # montage audio
easytag # gestion des métadonnées des fichiers musicaux

3
public/app-edition-photo.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,6 +9,7 @@ in
mkIf cfg.edition-photo {
# Paquets
environment.systemPackages = with pkgs; [
# Méta données
exif

5
public/app-edition-video.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,7 +9,8 @@ in
mkIf cfg.edition-video {
environment.systemPackages = with pkgs; [
# Paquets
environment.systemPackages = with pkgs; [
# Vidéo
#cinelerra # editeur video
pitivi # montage vidéo

3
public/app-jeux.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,6 +9,7 @@ in
mkIf cfg.jeux {
# Paquets
environment.systemPackages = with pkgs; [
# Jeux
urbanterror

3
public/app-multimedia.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,6 +9,7 @@ in
mkIf profiles.isDesktop {
# Paquets
environment.systemPackages = with pkgs; [
# Multimedia

9
public/app-network.nix
Unescape Escape View File

@ -9,6 +9,7 @@ in
mkIf profiles.isDesktop {
# Paquets
environment.systemPackages = with pkgs; [
# Outils réseau
iperf # outil de mesure de la qualité du réseau
@ -23,7 +24,11 @@ mkIf profiles.isDesktop {
];
networking.firewall = {
allowedTCPPorts = [5201]; # iperf
allowedUDPPorts = [5201]; # iperf
allowedTCPPorts = [
5201 # iperf
];
allowedUDPPorts = [
5201 # iperf
];
};
}

3
public/app-securite.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,6 +9,7 @@ in
mkIf profiles.isDesktop {
# Paquets
environment.systemPackages = with pkgs; [
# Securité
gnome3.seahorse # gestionnaire graphique de clef GPG

3
public/app-virtualbox.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,6 +9,7 @@ in
mkIf cfg.virtualbox {
# Paquets
environment.systemPackages = with pkgs; [
linuxPackages.virtualbox
linuxPackages.virtualboxGuestAdditions

3
public/auto-upgrade.nix
Unescape Escape View File

@ -1,13 +1,14 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf cfg.auto-upgrade {
# Automatic update & automatic clean
system.autoUpgrade.enable = true;

12
public/environment.nix
Unescape Escape View File

@ -1,4 +1,11 @@
{ config, pkgs, ... }:
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
{
# Nombre de process d'installation en parrallèle effectués par Nix
@ -10,8 +17,7 @@
# On autorise les paquets non-libres
nixpkgs.config.allowUnfree = true;
# List packages installed in system profile. To search by name, run:
# $ nix-env -qaP | grep wget
# Paquets
environment = {
systemPackages = with pkgs; [
bind # utilisé pour les utilitaires comme dig

3
public/laptop.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -19,6 +19,7 @@ mkIf cfg.laptop {
hardware.bluetooth.enable = true;
# Paquets
environment.systemPackages = with pkgs; [
networkmanagerapplet
];

12
public/localisation.nix
Unescape Escape View File

@ -1,6 +1,14 @@
{ config, pkgs, ... }:
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf true {
{
# Select internationalisation properties.
i18n = {
consoleFont = "Lat2-Terminus16";

12
public/network-ipv6.nix
Unescape Escape View File

@ -1,6 +1,14 @@
{ config, pkgs, ... }:
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf true {
{
# Utilisation d'adresse IPv6 temporaire
## https://blog.linitx.com/control-privacy-addressing-ipv6-linux/

6
public/print.nix
Unescape Escape View File

@ -1,14 +1,16 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf cfg.print {
# Enable CUPS to print documents.
# Services
## Enable CUPS to print documents.
services.printing = {
enable = true;
drivers = [

9
public/public.nix
Unescape Escape View File

@ -1,4 +1,11 @@
{ config, pkgs, ... }:
{ config, lib, pkgs, ... }:
let
#inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
{
imports = [

15
public/service-haveged.nix
Unescape Escape View File

@ -1,7 +1,16 @@
{ config, pkgs, ... }:
{ config, lib, pkgs, ... }:
{
# Sécurité & Acces distant
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf true {
# Sécurité & Accès distant
# Services
## Augmentation de l'entropie du système par un générateur de nombres aléatoires
## cat /proc/sys/kernel/random/entropy_avail

3
public/service-laptop.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -11,6 +11,7 @@ mkIf cfg.laptop {
# Gestion spécifique pour PC portable
# Services
services.xserver.synaptics = {
enable = true;
twoFingerScroll = true;

3
public/service-locate.nix
Unescape Escape View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
@ -9,6 +9,7 @@ in
mkIf cfg.locate {
# Services
services.locate = {
enable = true;
interval = "hourly";

34
public/service-monitoring.nix
Unescape Escape View File

@ -1,14 +1,22 @@
{ config, pkgs, ... }:
{ config, lib, pkgs, ... }:
{
# Monitoring
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
# Noeud de supervision munin = pas de stockage des données locales
mkIf true {
# Services
## Noeud de supervision munin = pas de stockage des données locales
services.munin-node = {
enable = true;
};
# Munin server -- generate /var/www/munin
## Munin server -- generate /var/www/munin
services.munin-cron = {
enable = true;
hosts = ''
@ -20,12 +28,12 @@
'';
};
networking.firewall.allowedTCPPorts = [
# TODO configurer les bon ports lors de l'ouverture du service
8000
];
## Documentation
# * https://nixos.org/wiki/Create_and_debug_nix_packages
# * http://chriswarbo.net/essays/nixos/developing_on_nixos.html
# Réseau
networking.firewall = {
allowedTCPPorts = [
8000
];
allowedUDPPorts = [
];
};
}

9
public/service-pulseaudio.nix
Unescape Escape View File

@ -1,15 +1,16 @@
{ config, pkgs, ... }:
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
mkIf = pkgs.lib.mkIf;
in
{
mkIf profiles.isDesktop {
# Pulse Audio
hardware.pulseaudio = mkIf profiles.isDesktop {
hardware.pulseaudio = {
enable = true;
support32Bit = true;
};

15
public/service-ssh.nix
Unescape Escape View File

@ -1,7 +1,16 @@
{ config, pkgs, ... }:
{ config, lib, pkgs, ... }:
{
# OpenSSH daemon
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf true {
# Services
## OpenSSH daemon
services.openssh = {
enable = true;
# https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern_.28OpenSSH_6.7.2B.29

10
public/service-x11.nix
Unescape Escape View File

@ -1,15 +1,17 @@
{ config, pkgs, ... }:
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
mkIf = pkgs.lib.mkIf;
in
{
mkIf profiles.isDesktop {
# Services
# Enable the X11 windowing system.
services.xserver = mkIf profiles.isDesktop {
services.xserver = {
enable = true;
layout = "fr";
xkbOptions = "eurosign:e";

3
public/swap.nix
Unescape Escape View File

@ -1,13 +1,14 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) mkIf;
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf cfg.swap {
# Gestion du swap
# https://en.wikipedia.org/wiki/Swappiness

Write Preview
Loading…
Cancel
Save