Files
nix-config/hosts/server.nix
2025-02-03 17:20:50 +01:00

77 lines
1.7 KiB
Nix

{ config, lib, inputs, pkgs, ... }:
{
imports = [
modules/game.nix
modules/vboxHost.nix
modules/nvidia.nix
];
boot.kernelPackages = pkgs.linuxPackages;
boot.extraModulePackages = with config.boot.kernelPackages; [gasket];
networking.hostName = "server";
services.openssh.enable = true;
services.xserver.videoDrivers = [ "nvidia" ];
environment.systemPackages = with pkgs; [
zfs
nvidia-docker
libnvidia-container
];
boot.supportedFilesystems = [ "zfs" ];
networking.firewall.allowedTCPPorts = [
80 443 #http server
5000 #frigate
8083 137 138 139 445 548 3702 5357 #prob some samba shit
];
networking.firewall.allowedUDPPorts = [
80 443 #http server
5000 #frigate
8083 137 138 139 445 548 3702 5357 #prob some samba shit
];
networking.firewall.allowedUDPPortRanges = [
{from = 47950; to = 49000;}
];
networking.firewall.allowedTCPPortRanges = [
{from = 47950; to = 49000;}
];
networking = {
interfaces.eth0.ipv4.addresses = [ {
address = "192.168.1.24";
prefixLength = 24;
} ];
defaultGateway = "192.168.1.254";
nameservers = ["8.8.8.8" "8.8.4.4" "1.1.1.1"];
hostId = "68290da7";
};
virtualisation.docker = {
liveRestore = false;
enableOnBoot = true;
# daemon.settings = {
# runtimes.nvidia.path = "${pkgs.nvidia-docker}/bin/nvidia-container-runtime";
# exec-opts = ["native.cgroupdriver=cgroupfs"];
# };
};
services.fail2ban.enable = true;
services.fail2ban.bantime = "2h";
hardware.nvidia-container-toolkit.enable = true;
hardware.nvidia = {
open = true;
prime.nvidiaBusId = "PCI:1:0:0";
prime.amdgpuBusId = "PCI:13:0:0";
prime.sync.enable = true;
modesetting.enable = true;
};
}