99 lines
2.2 KiB
Nix
99 lines
2.2 KiB
Nix
|
|
{ config, lib, inputs, pkgs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
../modules/game.nix
|
|
../modules/vboxHost.nix
|
|
../modules/nvidia.nix
|
|
];
|
|
boot.kernelPackages = pkgs.linuxPackages;
|
|
boot.extraModulePackages = [ config.boot.kernelPackages.gasket ];
|
|
|
|
networking.hostName = "server";
|
|
services.openssh.enable = true;
|
|
services.openssh.ports = [ 1880 ];
|
|
|
|
services.xserver.videoDrivers = [ "nvidia" ];
|
|
|
|
boot.extraModprobeConfig = ''
|
|
options amdgpu virtual_display=1
|
|
'';
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
zfs
|
|
nvidia-docker
|
|
libnvidia-container
|
|
screen
|
|
];
|
|
|
|
|
|
boot.supportedFilesystems = [ "zfs" ];
|
|
|
|
# services.cron.enable = false;
|
|
# services.cron.systemCronJobs = [
|
|
# # m h dom m dow
|
|
# # https://crontab.guru <3
|
|
# ];
|
|
|
|
networking.firewall.allowedTCPPorts = [
|
|
22 #git ssh
|
|
80 443 #http server
|
|
5000 #frigate
|
|
8083 137 138 139 445 548 3702 5357 #prob some samba shit
|
|
24454 #minecraft voice chat
|
|
25565 # minecraft server
|
|
];
|
|
networking.firewall.allowedUDPPorts = [
|
|
22 #git ssh
|
|
80 443 #http server
|
|
5000 #frigate
|
|
8083 137 138 139 445 548 3702 5357 #prob some samba shit
|
|
24454 #minecraft voice chat
|
|
25565 # minecraft server
|
|
];
|
|
|
|
networking.firewall.allowedUDPPortRanges = [
|
|
{from = 47950; to = 49000;}
|
|
];
|
|
networking.firewall.allowedTCPPortRanges = [
|
|
{from = 47950; to = 49000;}
|
|
];
|
|
|
|
networking = {
|
|
interfaces.eth0.ipv4.addresses = [ {
|
|
address = "192.168.1.24";
|
|
prefixLength = 24;
|
|
} ];
|
|
defaultGateway.address = "192.168.1.254";
|
|
defaultGateway.interface = "eth0";
|
|
nameservers = ["8.8.8.8" "8.8.4.4" "1.1.1.1"];
|
|
hostId = "68290da7";
|
|
};
|
|
virtualisation.docker = {
|
|
liveRestore = false;
|
|
enableOnBoot = true;
|
|
package = inputs.pkgs-docker-2750.legacyPackages."x86_64-linux".docker;
|
|
# daemon.settings = {
|
|
# runtimes.nvidia.path = "${pkgs.nvidia-docker}/bin/nvidia-container-runtime";
|
|
# exec-opts = ["native.cgroupdriver=cgroupfs"];
|
|
# };
|
|
|
|
};
|
|
|
|
services.fail2ban.enable = true;
|
|
services.fail2ban.bantime = "2h";
|
|
|
|
hardware.nvidia-container-toolkit.enable = true;
|
|
|
|
hardware.nvidia = {
|
|
open = true;
|
|
|
|
# prime.nvidiaBusId = "PCI:1:0:0";
|
|
# prime.amdgpuBusId = "PCI:13:0:0";
|
|
# prime.sync.enable = true;
|
|
|
|
# modesetting.enable = true;
|
|
};
|
|
}
|