nix dotfiles

server/configuration.nix

@@ -0,0 +1,49 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  imports = [
+    ./hardware-configuration.nix
+    ./matrix.nix
+    ./element.nix
+    ./forgejo.nix
+  ];
+
+  nixpkgs.config.permittedInsecurePackages = [
+    "olm-3.2.16"
+  ];
+
+  boot.loader.grub.enable = true;
+  boot.loader.grub.device = "/dev/sda";
+  networking.hostName = "navi";
+
+  networking.dhcpcd.IPv6rs = true;
+  networking.dhcpcd.persistent = true;
+  networking.tempAddresses = "disabled";
+  networking.interfaces.ens3.tempAddress = "disabled";
+
+  services.openssh = {
+    enable = true;
+    settings = {
+      PermitRootLogin = "prohibit-password";
+      PasswordAuthentication = false;
+      PubkeyAuthentication = true;
+    };
+  };
+
+  users.users.root = {
+    isNormalUser = false;
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHioVSkG7cILl5SQiGm3TaL641BGU00FLSgexBx6xtYy"
+    ];
+    password = null;
+  };
+
+  services.cron.enable = true;
+  services.cron.systemCronJobs = [
+    "@reboot root sleep 30 && curl -L -XPOST -q https://portal.servinga.cloud/api/service/v1/cloud-init/callback > /dev/null 2>&1"
+  ];
+
+  system.stateVersion = "26.05";
+}