aboutsummaryrefslogtreecommitdiff
path: root/modules/server/default.nix
blob: 150cd4dcfcf5935e1d0ed8d2bc157add73919bc3 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
{
	imports = [
		./calibre
		./cgit
		./forgejo
		./gemini
		./grafana
		./immich
		./jellyfin
		./monero
		./ollama
	];
	
	services = {
		nginx = {
			enable = true;
	    recommendedGzipSettings = true;
	    recommendedOptimisation = true;
	    recommendedProxySettings = true;
		};

		sshguard.enable = true;

		openssh = {
		  enable  = false;
		  settings = {
		    PermitRootLogin = false;
		    PasswordAuthentication = false;
		    AllowTcpForwarding = false;
		    X11Forwarding = false;
		  };
		};
	};

	networking = {
		firewall.allowedTCPPorts = [ 80 ];

		hosts = {
		  "127.0.0.1" = [
		  	"library.internal"
		  	"media.internal"
		  	"photos.internal"
		  	"chat.internal"
		  	"ollama.internal"
		  	"code.internal"
		  	"forge.internal"
		  	"search.internal"
		  	"monitor.internal"
		  ];
		};
	};
}
Directive (EU) 2019/790, Article 4(3); all rights regarding Text and Data Mining (TDM) are reserved.