homeACE

system-modules/boot.nix

@@ -22,8 +22,8 @@
       device = "nodev";
       # useOSProber = true;
       efiSupport = true;
-      theme = grub-theme-ascii-diana;
-      font = "${grub-theme-ascii-diana}/unicode.pf2";
+      #theme = grub-theme-ascii-diana;
+      #font = "${grub-theme-ascii-diana}/unicode.pf2";
       fontSize = 50;
       splashImage = null;
   

system-modules/nx2site.nix

@@ -0,0 +1,20 @@
+{ config, pkgs, lib, user, host, ... }:
+{
+  imports = if host == "NxACE" then [
+    
+  ] else [];
+  
+  config = lib.mkIf (host == "NxACE") {
+#    security.acme = {
+#      acceptTerms = true;
+#      defaults.email = "acme@nx2.site";
+#      certs."nx2.site" = {
+#        dnsProvider = "namecheap";
+#        environmentFile = ../secrets/nx2site/namecheap-creds.env;
+#      };
+#    };
+    services.nginx = {
+      enable = true;
+    }; 
+  };
+}

system-modules/sshd.nix

@@ -0,0 +1,12 @@
+{ config, pkgs, lib, secrets, ... }:
+
+{
+  services.openssh = {
+    enable = true;
+    ports = secrets.nx2site.ssh.ports;
+    settings = {
+      PasswordAuthentication = false;
+    };
+  };
+}
+

system-modules/users.nix

@@ -7,6 +7,9 @@
     isNormalUser = true;
     extraGroups = [ "networkmanager" "wheel" "audio" "video" "docker" "libvirtd" "uinput" ];
     useDefaultShell = true;
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHzEtnN/GrgXK7yz+0z1x6rKHhYYQhTOFQ6c6Faz79g2 Nx2-ed25519-ssh-key"
+    ];
     packages = with pkgs; []; # all in home.nix
   };
   users.users.tv = lib.mkIf (host == "NxACE") {