Berwn
807785cdab
- Knot authoritative DNS: ns1 primary, ns2 secondary serving cnx.network, buildfor.life and cnx.email over TSIG-secured zone transfer (modules/dns) - Knot listens publicly + over ZeroTier; firewall opens port 53 - Complete clan inventory: name/domain, admin SSH key, control as the zerotier controller, tor on all nixos machines - Enable age yubikey/fido2-hmac secret plugins
55 lines
1.3 KiB
Nix
55 lines
1.3 KiB
Nix
{
|
|
inputs.clan-core.url = "https://git.clan.lol/clan/clan-core/archive/25.11.tar.gz";
|
|
inputs.nixpkgs.follows = "clan-core/nixpkgs";
|
|
|
|
outputs =
|
|
{
|
|
self,
|
|
clan-core,
|
|
nixpkgs,
|
|
...
|
|
}@inputs:
|
|
let
|
|
# Usage see: https://docs.clan.lol
|
|
clan = clan-core.lib.clan {
|
|
inherit self;
|
|
imports = [ ./clan.nix ];
|
|
specialArgs = { inherit inputs; };
|
|
|
|
# Customize nixpkgs
|
|
# pkgsForSystem =
|
|
# system:
|
|
# import nixpkgs {
|
|
# inherit system;
|
|
# config = {
|
|
# allowUnfree = true;
|
|
# };
|
|
# overlays = [];
|
|
# };
|
|
secrets.age.plugins = [
|
|
"age-plugin-yubikey"
|
|
"age-plugin-fido2-hmac"
|
|
];
|
|
};
|
|
in
|
|
{
|
|
inherit (clan.config) nixosConfigurations nixosModules clanInternals;
|
|
clan = clan.config;
|
|
# Add the Clan cli tool to the dev shell.
|
|
# Use "nix develop" to enter the dev shell.
|
|
devShells =
|
|
nixpkgs.lib.genAttrs
|
|
[
|
|
"x86_64-linux"
|
|
"aarch64-linux"
|
|
"aarch64-darwin"
|
|
"x86_64-darwin"
|
|
]
|
|
(system: {
|
|
default = clan-core.inputs.nixpkgs.legacyPackages.${system}.mkShell {
|
|
packages = [ clan-core.packages.${system}.clan-cli ];
|
|
};
|
|
});
|
|
};
|
|
}
|