Add of vaulwarden

Some refractoring and start of a more versatil config
This commit is contained in:
Wateir 2025-12-17 23:11:49 +01:00
parent 372b6bc4bb
commit d4d7073344
6 changed files with 96 additions and 33 deletions

View file

@ -2,20 +2,22 @@
# your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running nixos-help).
{ config,pkgs, ... }:
{ config,pkgs,lib, ... }:
{
imports =
[ # Include the results of the hardware scan.
[
./hardware-configuration.nix
./package.nix
./module/hostname.nix
./module/searXNG.nix
./module/roundcube.nix
./module/vaultWarden.nix
];
nix.settings.experimental-features = [ "nix-command" "flakes" ];
# Bootloader.
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
@ -29,13 +31,18 @@
# networking.proxy.default = "http://user:password@proxy:port/";
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
# Enable networking
networking.networkmanager.enable = true;
# Set your time zone.
services.nginx = {
enable = true;
virtualHosts."${config.HostName}" = {
forceSSL = false;
enableACME = false;
};
};
time.timeZone = "Europe/Paris";
# Select internationalisation properties.
i18n.defaultLocale = "en_US.UTF-8";
i18n.extraLocaleSettings = {
@ -50,17 +57,14 @@
LC_TIME = "fr_FR.UTF-8";
};
# Configure keymap in X11
services.xserver.xkb = {
layout = "fr";
variant = "azerty";
};
# Configure console keymap
console.keyMap = "fr";
programs.zsh.enable = true;
# Define a user account. Don't forget to set a password with passwd.
users.users.manager = {
isNormalUser = true;
description = "manager";
@ -116,6 +120,18 @@
useRoutingFeatures = "server"; # or "client" / "both"
};
security.acme = {
acceptTerms = true;
defaults.email = "admin+contact@wateir.fr";
certs."wateir.fr" = {
dnsProvider = "ovh";
environmentFile = "/etc/acme.env";
};
};
networking.firewall = {
enable = true;
allowedTCPPorts = [ 443 ];
@ -123,10 +139,6 @@
};
# Some programs need SUID wrappers, can be configured further or are
# started in user sessions.
# programs.mtr.enable = true;
@ -139,8 +151,6 @@
TERM = "xterm-256color";
};
# List services that you want to enable:
# Enable the OpenSSH daemon.
services.openssh.enable = true;
services.openssh.settings.Macs = [
@ -152,12 +162,6 @@
"hmac-sha2-256"
];
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. Its perfectly fine and recommended to leave
# this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
system.stateVersion = "25.11";
}