nixos-config/nixos-template-base
4
0
Fork 0
Code Issues 7 Pull Requests Releases Activity

application du template

Browse Source
This commit is contained in:
Jean-Pierre PRUNARET
2016-08-12 12:46:36 +02:00
parent 1cce1ec034
commit ea307cc5dc
41 changed files with 215 additions and 88 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
base.nix
View File

@@ -1,4 +1,11 @@
{ ... }: { config, lib, pkgs, ... }:
let
#inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
{ {
imports = [ imports = [

5
base/activation-manuelle/nix-serve-client.nix
View File

@@ -1,13 +1,14 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf mkMerge; inherit (lib) mkIf mkMerge mkThenElse;
profiles = config.r6d.profiles;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles;
in in
mkIf cfg.nix-serve-client { mkIf cfg.nix-serve-client {
nix = { nix = {
# Cache http pour le store # Cache http pour le store
requireSignedBinaryCaches = false; requireSignedBinaryCaches = false;

27
base/activation-manuelle/nix-serve-server.nix
View File

@@ -1,12 +1,27 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
with pkgs.lib;
let let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
in { computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf cfg.nix-serve-server {
# Cache http pour le store # Cache http pour le store
services.nix-serve.enable = cfg.nix-serve-server; # Services
networking.firewall.allowedTCPPorts = mkIf cfg.nix-serve-server [ 5000 ]; services.nix-serve = {
enable = true;
};
# Réseau
networking.firewall = {
allowedTCPPorts = [
5000
];
allowedUDPPorts = [
];
};
} }

15
base/activation-manuelle/service-fail2ban.nix
View File

@@ -1,17 +1,20 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
with pkgs.lib;
let let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
ignoreip = "pedro.dubronetwork.fr cube.dubronetwork.fr voyage.prunetwork.fr xray.prunetwork.fr 192.168.0.0/16 172.16.0.0/16"; ignoreip = "pedro.dubronetwork.fr cube.dubronetwork.fr voyage.prunetwork.fr xray.prunetwork.fr 192.168.0.0/16 172.16.0.0/16";
destemail = "admins@dubronetwork.fr"; destemail = "admins@dubronetwork.fr";
in
mkIf cfg.fail2ban {
in {
# Gestion de fail2ban # Gestion de fail2ban
# Services
services = mkIf cfg.fail2ban { services = {
fail2ban = { fail2ban = {
enable = true; enable = true;
jails = { jails = {

6
base/activation-manuelle/users.nix
View File

@@ -1,9 +1,9 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
with pkgs.lib;
let let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
# Dubronetwork # Dubronetwork

9
base/base.nix
View File

@@ -1,4 +1,11 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
let
#inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
{ {
imports = [ imports = [

12
base/network-dns.nix
View File

@@ -1,6 +1,14 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf true {
{
# Définition des domaines utilisés lorsque un identifiant non-FQDN est donné (ping, nslookup) # Définition des domaines utilisés lorsque un identifiant non-FQDN est donné (ping, nslookup)
networking = { networking = {
search = [ search = [

1
config-generator.nix
View File

@@ -1,6 +1,5 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
# exemple utilisé pour commencer bird.nix
let let
inherit (lib) mkEnableOption mkIf mkMerge mkOption singleton types; inherit (lib) mkEnableOption mkIf mkMerge mkOption singleton types;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;

10
desktop/activation-manuelle/xmonad/xmonad.nix
View File

@@ -1,19 +1,21 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
in
in mkIf cfg.xmonad { mkIf cfg.xmonad {
# Paquets spécifiques pour xmonad
environment.systemPackages = with pkgs;[ # Paquets
environment.systemPackages = with pkgs; [
dmenu dmenu
haskellPackages.xmobar haskellPackages.xmobar
]; ];
# Services
services.xserver.windowManager.xmonad = { services.xserver.windowManager.xmonad = {
enable = true; enable = true;
enableContribAndExtras = true; enableContribAndExtras = true;

1
desktop/desktop.nix
View File

@@ -13,6 +13,7 @@ in
./activation-manuelle/xmonad/xmonad.nix # gestionnaire de fenêtres xmonad ./activation-manuelle/xmonad/xmonad.nix # gestionnaire de fenêtres xmonad
]; ];
# Paquets
environment.systemPackages = with pkgs; mkIf profiles.isDesktop [ environment.systemPackages = with pkgs; mkIf profiles.isDesktop [
# Environement de bureau # Environement de bureau
arandr # interface graphique pour xrandr arandr # interface graphique pour xrandr

3
public/app-adminsys.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,6 +9,7 @@ in
mkIf profiles.isDesktop { mkIf profiles.isDesktop {
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
# Adminsys # Adminsys
iotop iotop

2
public/app-awesome.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;

3
public/app-bureautique.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,6 +9,7 @@ in
mkIf profiles.isDesktop { mkIf profiles.isDesktop {
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
# Bureautique # Bureautique
aspell aspellDicts.fr aspell aspellDicts.fr

5
public/app-cao.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,7 +9,8 @@ in
mkIf cfg.conception-assistee { mkIf cfg.conception-assistee {
environment.systemPackages = with pkgs; [ # Paquets
environment.systemPackages = with pkgs; [
# CAO # CAO
## Modélisation 3D ## Modélisation 3D
freecad # modélisation de pièces en 3D freecad # modélisation de pièces en 3D

3
public/app-cartographie.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,6 +9,7 @@ in
mkIf cfg.cartographie { mkIf cfg.cartographie {
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
# Gestion de données géographiques # Gestion de données géographiques
expat expat

3
public/app-client-internet.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,6 +9,7 @@ in
mkIf profiles.isDesktop { mkIf profiles.isDesktop {
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
# Clients Internet # Clients Internet

3
public/app-developpement.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,6 +9,7 @@ in
mkIf cfg.developpement { mkIf cfg.developpement {
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
# Base de données # Base de données
pgadmin pgadmin

3
public/app-docker.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,6 +9,7 @@ in
mkIf cfg.docker { mkIf cfg.docker {
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
# Ecosystème Docker # Ecosystème Docker
docker docker

5
public/app-edition-musique.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,7 +9,8 @@ in
mkIf cfg.edition-musique { mkIf cfg.edition-musique {
environment.systemPackages = with pkgs; [ # Paquets
environment.systemPackages = with pkgs; [
# #
audacity # montage audio audacity # montage audio
easytag # gestion des métadonnées des fichiers musicaux easytag # gestion des métadonnées des fichiers musicaux

3
public/app-edition-photo.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,6 +9,7 @@ in
mkIf cfg.edition-photo { mkIf cfg.edition-photo {
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
# Méta données # Méta données
exif exif

5
public/app-edition-video.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,7 +9,8 @@ in
mkIf cfg.edition-video { mkIf cfg.edition-video {
environment.systemPackages = with pkgs; [ # Paquets
environment.systemPackages = with pkgs; [
# Vidéo # Vidéo
#cinelerra # editeur video #cinelerra # editeur video
pitivi # montage vidéo pitivi # montage vidéo

3
public/app-jeux.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,6 +9,7 @@ in
mkIf cfg.jeux { mkIf cfg.jeux {
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
# Jeux # Jeux
urbanterror urbanterror

3
public/app-multimedia.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,6 +9,7 @@ in
mkIf profiles.isDesktop { mkIf profiles.isDesktop {
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
# Multimedia # Multimedia

9
public/app-network.nix
View File

@@ -9,6 +9,7 @@ in
mkIf profiles.isDesktop { mkIf profiles.isDesktop {
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
# Outils réseau # Outils réseau
iperf # outil de mesure de la qualité du réseau iperf # outil de mesure de la qualité du réseau
@@ -23,7 +24,11 @@ mkIf profiles.isDesktop {
]; ];
networking.firewall = { networking.firewall = {
allowedTCPPorts = [5201]; # iperf allowedTCPPorts = [
allowedUDPPorts = [5201]; # iperf 5201 # iperf
];
allowedUDPPorts = [
5201 # iperf
];
}; };
} }

3
public/app-securite.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,6 +9,7 @@ in
mkIf profiles.isDesktop { mkIf profiles.isDesktop {
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
# Securité # Securité
gnome3.seahorse # gestionnaire graphique de clef GPG gnome3.seahorse # gestionnaire graphique de clef GPG

3
public/app-virtualbox.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,6 +9,7 @@ in
mkIf cfg.virtualbox { mkIf cfg.virtualbox {
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
linuxPackages.virtualbox linuxPackages.virtualbox
linuxPackages.virtualboxGuestAdditions linuxPackages.virtualboxGuestAdditions

3
public/auto-upgrade.nix
View File

@@ -1,13 +1,14 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
in in
mkIf cfg.auto-upgrade { mkIf cfg.auto-upgrade {
# Automatic update & automatic clean # Automatic update & automatic clean
system.autoUpgrade.enable = true; system.autoUpgrade.enable = true;

12
public/environment.nix
View File

@@ -1,4 +1,11 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
{ {
# Nombre de process d'installation en parrallèle effectués par Nix # Nombre de process d'installation en parrallèle effectués par Nix
@@ -10,8 +17,7 @@
# On autorise les paquets non-libres # On autorise les paquets non-libres
nixpkgs.config.allowUnfree = true; nixpkgs.config.allowUnfree = true;
# List packages installed in system profile. To search by name, run: # Paquets
# $ nix-env -qaP | grep wget
environment = { environment = {
systemPackages = with pkgs; [ systemPackages = with pkgs; [
bind # utilisé pour les utilitaires comme dig bind # utilisé pour les utilitaires comme dig

3
public/laptop.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -19,6 +19,7 @@ mkIf cfg.laptop {
hardware.bluetooth.enable = true; hardware.bluetooth.enable = true;
# Paquets
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
networkmanagerapplet networkmanagerapplet
]; ];

12
public/localisation.nix
View File

@@ -1,6 +1,14 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf true {
{
# Select internationalisation properties. # Select internationalisation properties.
i18n = { i18n = {
consoleFont = "Lat2-Terminus16"; consoleFont = "Lat2-Terminus16";

12
public/network-ipv6.nix
View File

@@ -1,6 +1,14 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf true {
{
# Utilisation d'adresse IPv6 temporaire # Utilisation d'adresse IPv6 temporaire
## https://blog.linitx.com/control-privacy-addressing-ipv6-linux/ ## https://blog.linitx.com/control-privacy-addressing-ipv6-linux/

6
public/print.nix
View File

@@ -1,14 +1,16 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
in in
mkIf cfg.print { mkIf cfg.print {
# Enable CUPS to print documents.
# Services
## Enable CUPS to print documents.
services.printing = { services.printing = {
enable = true; enable = true;
drivers = [ drivers = [

9
public/public.nix
View File

@@ -1,4 +1,11 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
let
#inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
{ {
imports = [ imports = [

15
public/service-haveged.nix
View File

@@ -1,7 +1,16 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
{ let
# Sécurité & Acces distant inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf true {
# Sécurité & Accès distant
# Services
## Augmentation de l'entropie du système par un générateur de nombres aléatoires ## Augmentation de l'entropie du système par un générateur de nombres aléatoires
## cat /proc/sys/kernel/random/entropy_avail ## cat /proc/sys/kernel/random/entropy_avail

3
public/service-laptop.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -11,6 +11,7 @@ mkIf cfg.laptop {
# Gestion spécifique pour PC portable # Gestion spécifique pour PC portable
# Services
services.xserver.synaptics = { services.xserver.synaptics = {
enable = true; enable = true;
twoFingerScroll = true; twoFingerScroll = true;

3
public/service-locate.nix
View File

@@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
@@ -9,6 +9,7 @@ in
mkIf cfg.locate { mkIf cfg.locate {
# Services
services.locate = { services.locate = {
enable = true; enable = true;
interval = "hourly"; interval = "hourly";

34
public/service-monitoring.nix
View File

@@ -1,14 +1,22 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
{ let
# Monitoring inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
# Noeud de supervision munin = pas de stockage des données locales mkIf true {
# Services
## Noeud de supervision munin = pas de stockage des données locales
services.munin-node = { services.munin-node = {
enable = true; enable = true;
}; };
# Munin server -- generate /var/www/munin ## Munin server -- generate /var/www/munin
services.munin-cron = { services.munin-cron = {
enable = true; enable = true;
hosts = '' hosts = ''
@@ -20,12 +28,12 @@
''; '';
}; };
networking.firewall.allowedTCPPorts = [ # Réseau
# TODO configurer les bon ports lors de l'ouverture du service networking.firewall = {
8000 allowedTCPPorts = [
]; 8000
];
## Documentation allowedUDPPorts = [
# * https://nixos.org/wiki/Create_and_debug_nix_packages ];
# * http://chriswarbo.net/essays/nixos/developing_on_nixos.html };
} }

9
public/service-pulseaudio.nix
View File

@@ -1,15 +1,16 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
mkIf = pkgs.lib.mkIf;
in in
{ mkIf profiles.isDesktop {
# Pulse Audio # Pulse Audio
hardware.pulseaudio = mkIf profiles.isDesktop { hardware.pulseaudio = {
enable = true; enable = true;
support32Bit = true; support32Bit = true;
}; };

15
public/service-ssh.nix
View File

@@ -1,7 +1,16 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
{ let
# OpenSSH daemon inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator;
computers = config.r6d.computers;
profiles = config.r6d.profiles;
in
mkIf true {
# Services
## OpenSSH daemon
services.openssh = { services.openssh = {
enable = true; enable = true;
# https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern_.28OpenSSH_6.7.2B.29 # https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern_.28OpenSSH_6.7.2B.29

10
public/service-x11.nix
View File

@@ -1,15 +1,17 @@
{ config, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
mkIf = pkgs.lib.mkIf;
in in
{ mkIf profiles.isDesktop {
# Services
# Enable the X11 windowing system. # Enable the X11 windowing system.
services.xserver = mkIf profiles.isDesktop { services.xserver = {
enable = true; enable = true;
layout = "fr"; layout = "fr";
xkbOptions = "eurosign:e"; xkbOptions = "eurosign:e";

3
public/swap.nix
View File

@@ -1,13 +1,14 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
inherit (lib) mkIf; inherit (lib) mkIf mkMerge mkThenElse;
cfg = config.r6d.config-generator; cfg = config.r6d.config-generator;
computers = config.r6d.computers; computers = config.r6d.computers;
profiles = config.r6d.profiles; profiles = config.r6d.profiles;
in in
mkIf cfg.swap { mkIf cfg.swap {
# Gestion du swap # Gestion du swap
# https://en.wikipedia.org/wiki/Swappiness # https://en.wikipedia.org/wiki/Swappiness