home/nixos/machines/foxhut/machine.nix

53 lines
1.2 KiB
Nix

{ pkgs, pkgs-unstable, asahi-firmware, ... }:
{ config, ... }:
{
environment.systemPackages = (with pkgs-unstable; [
renoise
signal-desktop
wireguard-tools
cifs-utils
]) ++ (with pkgs; [
prismlauncher
]);
services.mysql = {
enable = true;
package = pkgs.mariadb;
dataDir = "/var/lib/mysql";
settings = {
mysqld = {
bind_address = "127.0.0.1";
# socket = "/tmp/mariadb.sock";
};
};
ensureDatabases = [
"bnuybase"
];
ensureUsers = [
{
name = "xenia";
ensurePermissions = {
"bnuybase.*" = "ALL PRIVILEGES";
};
}
];
};
networking.firewall.allowedUDPPorts = [ 51821 ];
networking.wireguard = {
enable = true;
interfaces.wg0 = {
ips = [ "192.168.69.254/32" ];
listenPort = 51821;
privateKeyFile = "/home/xenia/wireguard-keys/private";
peers = [ {
publicKey = "XfHU29ij76y4TB8P/QJyn1JnTl9tvxO77IGVmM6p+ic=";
allowedIPs = [ "10.30.0.0/16" "10.250.0.0/16" "10.254.0.0/16" "192.168.30.0/24" "192.168.40.0/24" "192.168.50.0/24" "192.168.51.0/24" "192.168.250.0/24" ];
endpoint = "129.16.13.37:13231";
persistentKeepalive = 25;
} ];
};
};
}