blob: 60b76817d1b487d2230f1bbe31f43ca4b9274c86 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
{
imports = [
./adguard
./calibre
./cgit
./forgejo
./gemini
./grafana
./immich
./jellyfin
./ollama
./searx
];
services = {
nginx = {
enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
};
sshguard.enable = true;
openssh = {
enable = false;
settings = {
PermitRootLogin = false;
PasswordAuthentication = false;
AllowTcpForwarding = false;
X11Forwarding = false;
};
};
};
networking = {
firewall.allowedTCPPorts = [ 80 ];
hosts = {
"127.0.0.1" = [
"library.internal"
"media.internal"
"photos.internal"
"chat.internal"
"ollama.internal"
"code.internal"
"forge.internal"
"search.internal"
"monitor.internal"
];
};
};
}
|
