machines/truite/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

{ me, machines, ... }:

{
  imports = [
    ../../modules/common.nix

    # truite is the primary (and only) ingress node
    # of the renard tunnel at `tunnel.rnrd.eu`.
    ../../modules/tunnel/ingress.nix

    ./hardware.nix
    ./devices.nix
  ];

  foundation = {
    www = {
      enable = true;

      public = true;
      tailnet = false;
    };

    monitoring = {
      client.enable = true;
      services = [
        "base"
        "tailnet"
      ];
    };

    vpn = {
      enable = true;
      externalInterface = "ens18";
    };
  };

  system.stateVersion = "25.11";
}