Иммутабельный конфиг NixOS
 
 
Go to file
Izorkin fa6492b0c5 move all json files to local subfolder 2021-12-11 10:14:29 +02:00
api Move sp-api to nix overlay 2021-11-17 16:35:00 +03:00
generic/profiles move all json files to local subfolder 2021-12-11 10:14:29 +02:00
local/services move all services to subfolder 2021-12-11 10:02:06 +02:00
resources Initial commit 2021-11-15 13:02:05 +03:00
.gitignore move all json files to local subfolder 2021-12-11 10:14:29 +02:00
LICENSE Изменил(а) на 'LICENSE' 2021-11-18 10:08:19 +02:00
README.md move all json files to local subfolder 2021-12-11 10:14:29 +02:00
configuration.nix move all services to subfolder 2021-12-11 10:02:06 +02:00
files.nix Fix errors caused by temp files creation 2021-11-17 11:54:36 +03:00
result move all json files to local subfolder 2021-12-11 10:14:29 +02:00
users.nix It builds! 2021-11-15 13:29:20 +03:00
variables-module.nix Fix not being able to create a server without trusted keys 2021-11-18 21:12:59 +03:00
variables.nix move all json files to local subfolder 2021-12-11 10:14:29 +02:00

README.md

SelfPrivacy NixOS configuration

This is a NixOS config which builds a SelfPrivacy server distribution based on data provided in local/profiles/users.json.

JSON schema is provided in generic/profiles/schema.json for reference.

hardware-configuration.nix is not included.

Example JSON config:

{
    "backblaze": {
        "accountId": "BACKBLAZE_KEY_ID",
        "accountKey": "BACKBLAZE_ACCOUNT_KEY",
        "bucket": "BACKBLAZE_BUCKET_NAME"
    },
    "api": {
        "token": "API_TOKEN",
        "enableSwagger": false
    },
    "bitwarden": {
        "enable": true
    },
    "cloudflare": {
        "apiKey": "CF_TOKEN"
    },
    "databasePassword": "DB_PASSWORD",
    "domain": "DOMAIN",
    "hashedMasterPassword": "HASHED_PASSWORD",
    "hostname": "DOMAIN",
    "nextcloud": {
        "enable": true,
        "adminPassword": "PASSWORD",
        "databasePassword": "PASSWORD"
    },
    "gitea": {
        "enable": true
    },
    "jitsi": {
        "enable": true
    },
    "ocserv": {
        "enable": true
    },
    "pleroma": {
        "enable": true
    },
    "timezone": "Europe/Moscow",
    "resticPassword": "PASSWORD",
    "ssh": {
        "enable": true,
        "rootSshKeys": [
            "ssh-ed25519 KEY user@host"
        ],
        "passwordAuthentication": true
    },
    "username": "LUSER",
    "users": [
        {
            "hashedPassword": "OTHER_USER_HASHED_PASSWORD",
            "username": "OTHER_USER"
        }
    ]
}