Nix configurations for my homelab
1{ config, tangled, ... }:
2{
3 imports = [ tangled.nixosModules.knot ];
4
5 environment.persistence."/data/persistent".directories = [
6 {
7 directory = config.services.tangled.knot.stateDir;
8 mode = "0700";
9 user = config.services.tangled.knot.gitUser;
10 group = config.services.tangled.knot.gitUser;
11 }
12 ];
13
14 services.openssh = {
15 ports = [ 22 ];
16 settings.AllowUsers = [ "${config.services.tangled.knot.gitUser}" ];
17 };
18
19 networking.firewall.allowedTCPPorts = [ 22 ];
20
21 services.tangled.knot = {
22 enable = true;
23 openFirewall = false;
24 stateDir = "/var/lib/tangled/knot";
25 repo.scanPath = "${config.services.tangled.knot.stateDir}/repos";
26 git = {
27 userName = "knot.butwho.org";
28 userEmail = "noreply@butwho.org";
29 };
30 server = {
31 hostname = "knot.butwho.org";
32 owner = "did:plc:3sk3ef72ac36w44kvr3ki5q7"; # at://yemou.pink
33 };
34 };
35}