updating files for lxc container and ipv6
This commit is contained in:
@@ -1,39 +1,37 @@
|
||||
{ config, modulesPath, pkgs, lib, ... }:
|
||||
{
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
...
|
||||
}: {
|
||||
imports = [
|
||||
./hardware-configuration.nix
|
||||
(modulesPath + "/virtualisation/proxmox-lxc.nix")
|
||||
./matrix.nix
|
||||
];
|
||||
nix.settings = { sandbox = false; };
|
||||
proxmoxLXC = {
|
||||
manageNetwork = false;
|
||||
privileged = true;
|
||||
};
|
||||
|
||||
boot.loader.systemd-boot.enable = true;
|
||||
boot.loader.efi.canTouchEfiVariables = true;
|
||||
# Disable /sys/kernel/debug mount which fails in LXC
|
||||
systemd.mounts = [{
|
||||
where = "/sys/kernel/debug";
|
||||
enable = false;
|
||||
}];
|
||||
|
||||
networking.hostName = "nixos-matrix";
|
||||
networking.networkmanager.enable = true;
|
||||
services.fstrim.enable = false; # Let Proxmox host handle fstrim
|
||||
networking.firewall.enable = false;
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
openFirewall = true;
|
||||
settings = {
|
||||
PermitRootLogin = "yes";
|
||||
PasswordAuthentication = true;
|
||||
PermitEmptyPasswords = "yes";
|
||||
};
|
||||
};
|
||||
|
||||
time.timeZone = "America/Los_Angeles";
|
||||
|
||||
users.users.tony = {
|
||||
users.users.w0bm = {
|
||||
isNormalUser = true;
|
||||
extraGroups = ["wheel"];
|
||||
};
|
||||
|
||||
services.openssh.enable = true;
|
||||
services.nginx.enable = true;
|
||||
|
||||
security.acme = {
|
||||
acceptTerms = true;
|
||||
defaults.email = "your-email@example.com";
|
||||
};
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
vim
|
||||
git
|
||||
];
|
||||
|
||||
system.stateVersion = "25.11";
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user