server.nix

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ config, pkgs, lib, modulesPath, ... }:

{
  imports =
    [
      # Include the default lxd configuration.
      "${modulesPath}/virtualisation/lxc-container.nix"
      ./base.nix
      ./grafana.nix
      ./admin-pw.nix
      ./nextcloud.nix
      ./server-apps.nix
#      ./pufferpanel.nix
#      ./asterisk
#      ./cloudlog.nix
      ./node_exporter.service.nix
      ./wordpress.nix
      ./misc/maciej.nix
      ./server
    ];

  virtualisation.docker.enable = true;

  nixpkgs.hostPlatform = "x86_64-linux";

  security.sudo.wheelNeedsPassword = false;

  documentation.enable = true;
  documentation.nixos.enable = true;
  documentation.man.enable = true;

  networking.useDHCP = false;
  networking.interfaces.eth0.useDHCP = true;

  networking.useNetworkd = true;

  networking.resolvconf.enable = false;
  networking.useHostResolvConf = false;

  networking.hostName = "oliver-server";

  system.stateVersion = "24.05"; # Did you read the comment?

  security.acme.acceptTerms = true;
  security.acme.defaults.email = "oliver.koss06@gmail.com";

  system.autoUpgrade.enable = true;
  # system.autoUpgrade.allowReboot = true;
  # system.autoUpgrade.rebootWindow.lower = "04:00";
  # system.autoUpgrade.rebootWindow.upper = "06:00";
  system.autoUpgrade.flake = "github:oliver-koss/nixos/master";

  services.prometheus = {
    enable   = true;
    port     = 9090;
    configText = "
      global:
        scrape_interval: 10s

      scrape_configs:
        - job_name: 'prometheus'
          scrape_interval: 5s
          static_configs:
          - targets: ['localhost:9100']
        - job_name: 'prometheus-nuc'
          scrape_interval: 5s
          static_configs:
          - targets: ['nuc.ygg.oliver-koss.at:9100']
        - job_name: 'tasmota-maciej'
          scrape_interval: 5s
          static_configs:
          - targets: ['nuc.ygg.oliver-koss.at:9092']

    ";
  };

#  networking.firewall.allowedTCPPorts =  [ 9090 ];

  services.localtimed.enable = true;

  nixpkgs.config.allowUnfree = true;

}