kekl

hosts/molniya/config/boot.nix

@@ -0,0 +1,34 @@
+{ config, pkgs, ... }:
+{
+  boot = {
+    initrd = {
+      luks = {
+        devices."luks-d810fef7-b1c9-4007-bcb1-12c99c8692b0".device = "/dev/disk/by-uuid/d810fef7-b1c9-4007-bcb1-12c99c8692b0";
+      };
+    };  
+    extraModulePackages = with config.boot.kernelPackages; [ ];
+    kernelParams = [ "debug" ];
+    loader = {
+      efi = {
+      # canTouchEfiVariables = true;
+        efiSysMountPoint = "/boot"; 
+      };
+      grub = {
+        enable = true;
+	      copyKernels = true;
+        efiInstallAsRemovable = true;
+        enableCryptodisk = false; 
+        efiSupport = true;
+        devices = [ "nodev" ];
+	      extraEntries = ''
+          menuentry "Reboot" {
+            reboot
+          }
+          menuentry "Poweroff" {
+            halt
+          }
+       '';
+      };
+    }; 
+  };
+}

hosts/molniya/config/default.nix

@@ -0,0 +1,10 @@
+{ config, pkgs, ... }:
+{
+  imports = 
+  [ 
+    ./boot.nix
+    ./networking.nix
+    ./pkgs.nix
+    ./irc.nix
+  ];
+}

hosts/molniya/config/irc.nix

@@ -0,0 +1,25 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = with pkgs; [weechat];
+  services = {
+    weechat = {
+      enable = true;
+    };
+    tor = {
+      enable = true;
+      controlSocket.enable = true;
+      client = {
+        enable = true;
+        socksListenAddress = {
+          addr = "127.0.0.1";
+          port = 9050;
+        };
+      };
+      settings = {
+        MapAddress = "palladium.libera.chat libera75jm6of4wxpxt4aynol3xjmbtxgfyjpu34ss4d7r7q2v5zrpyd.onion";
+        ControlPort = [ 9051 ];
+      };
+    };
+
+  };
+}

hosts/molniya/config/networking.nix

@@ -0,0 +1,22 @@
+{ config, pkgs, ... }:
+{
+  environment.systemPackages = with pkgs; [ wireguard-tools ];
+  services = {
+    mullvad-vpn = {
+      enable = true;
+      package = pkgs.mullvad-vpn;
+    };
+  }; 
+  networking = {
+    networkmanager = {
+      enable = true;
+    };
+    firewall = {
+      enable = false;
+      checkReversePath = false;
+
+      allowedTCPPorts = [];  
+      allowedUDPPorts = [];
+    };
+  };
+}