summary refs log tree commit diff
path: root/roles/remote-server.nix
diff options
context:
space:
mode:
authorMel <mel@rnrd.eu>2026-03-10 02:16:54 +0100
committerMel <mel@rnrd.eu>2026-03-16 20:51:38 +0100
commit430685e90789fec036de1d166a228c098bb0dbd5 (patch)
treefe3806dbff4c4dab59adad466a31f7ce9ec5b7c0 /roles/remote-server.nix
parent02e0fc6f86286cf5cc7493b63af44409510e199f (diff)
downloadminerals-430685e90789fec036de1d166a228c098bb0dbd5.tar.zst
minerals-430685e90789fec036de1d166a228c098bb0dbd5.zip
Use Plasma 6 for remote servers like Wolfram
Signed-off-by: Mel <mel@rnrd.eu>
Diffstat (limited to 'roles/remote-server.nix')
-rw-r--r--roles/remote-server.nix45
1 files changed, 29 insertions, 16 deletions
diff --git a/roles/remote-server.nix b/roles/remote-server.nix
index 6091bd7..f27721e 100644
--- a/roles/remote-server.nix
+++ b/roles/remote-server.nix
@@ -1,15 +1,42 @@
 {
+  pkgs,
   ...
 }:
+
 {
   imports = [
-    # we inherit from desktop
-    ./desktop.nix
+    ../modules/common.nix
+    ../modules/plasma.nix
+    ../modules/fonts.nix
+    ../modules/flatpak.nix
+    ../modules/hardware-keys.nix
 
     # primary streaming setup
     ../modules/sunshine.nix
   ];
 
+  services = {
+    tailscale = {
+      enable = true;
+      useRoutingFeatures = "both";
+      extraUpFlags = [ "--ssh" ];
+    };
+    openssh = {
+      enable = true;
+      openFirewall = true;
+    };
+  };
+
+  programs = {
+    steam = {
+      enable = true;
+      remotePlay.openFirewall = true;
+      dedicatedServer.openFirewall = true;
+      localNetworkGameTransfers.openFirewall = true;
+    };
+    virt-manager.enable = true;
+  };
+
   virtualisation = {
     docker = {
       enable = true;
@@ -20,19 +47,5 @@
     };
   };
 
-  programs.steam = {
-    enable = true;
-    remotePlay.openFirewall = true;
-    dedicatedServer.openFirewall = true;
-    localNetworkGameTransfers.openFirewall = true;
-  };
-
-  services.openssh = {
-    enable = true;
-    openFirewall = true;
-  };
-
-  # override desktop configuration, because we do run SSH
-  # on remote-servers.
   age.identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
 }