0bd0ca09a3
If I want to build this on TVL's CI I can't reference ~/code/urb/urbos, obviously, so I'll just vendor it here which is fine Change-Id: I40feb4b29fafae1d3bb0119b7cca1613a4582fdc Reviewed-on: https://cl.tvl.fyi/c/depot/+/885 Tested-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: BuildkiteCI
31 lines
571 B
Nix
31 lines
571 B
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
with lib;
|
|
|
|
{
|
|
virtualisation.docker.enable = true;
|
|
|
|
nix = rec {
|
|
binaryCaches = [ "https://nix.urbinternal.com" ];
|
|
trustedBinaryCaches = binaryCaches;
|
|
requireSignedBinaryCaches = false;
|
|
};
|
|
|
|
services.openvpn.servers.urbint = {
|
|
config = ''
|
|
config /root/openvpn/urbint.conf
|
|
'';
|
|
autoStart = false;
|
|
};
|
|
|
|
users.users."grfn".extraGroups = [ "docker" ];
|
|
|
|
services.clamav = {
|
|
daemon.enable = true;
|
|
updater = {
|
|
enable = true;
|
|
interval = "daily";
|
|
frequency = 1; # per day
|
|
};
|
|
};
|
|
}
|