summary refs log tree commit diff
path: root/roles/remote-server.nix
diff options
context:
space:
mode:
authorMel <mel@rnrd.eu>2025-09-26 14:50:34 +0200
committerMel <mel@rnrd.eu>2025-09-26 15:19:47 +0200
commit79ddd100b2071874bbe920e52feefd9c7c11f6b1 (patch)
treef56ada47cfb9b76b3c609756c0ea241d7a502f40 /roles/remote-server.nix
parent6a1d5f484b000d3f9c6ebb2e2c7074da3186e1a7 (diff)
downloadminerals-79ddd100b2071874bbe920e52feefd9c7c11f6b1.tar.zst
minerals-79ddd100b2071874bbe920e52feefd9c7c11f6b1.zip
Add Wolfram as new remote-server
Signed-off-by: Mel <mel@rnrd.eu>
Diffstat (limited to 'roles/remote-server.nix')
-rw-r--r--roles/remote-server.nix35
1 files changed, 35 insertions, 0 deletions
diff --git a/roles/remote-server.nix b/roles/remote-server.nix
new file mode 100644
index 0000000..599ca73
--- /dev/null
+++ b/roles/remote-server.nix
@@ -0,0 +1,35 @@
+{
+  ...
+}:
+{
+  imports = [
+    # we inherit from desktop
+    ./desktop.nix
+  ];
+
+  virtualisation = {
+    docker = {
+      enable = true;
+      daemon.settings.dns = [
+        "1.1.1.1"
+        "1.0.0.1"
+      ];
+    };
+  };
+
+  programs.steam = {
+    enable = true;
+    remotePlay.openFirewall = true;
+    dedicatedServer.openFirewall = true;
+    localNetworkGameTransfers.openFirewall = true;
+  };
+
+  services.openssh = {
+    enable = true;
+    openFirewall = true;
+  };
+
+  # override desktop configuration, because we do run SSH
+  # on remote-servers.
+  age.identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+}