nixos-config/modules/services.nix
2020-10-02 00:48:27 +03:00

73 lines
1.6 KiB
Nix

{ config, lib, pkgs, ... }: {
services.acpid.enable = true;
services.apcupsd = { enable = config.device == "AMD-Workstation"; };
services.earlyoom = {
enable = config.devices.${config.device}.ram < 16;
freeMemThreshold = 5;
freeSwapThreshold = 100;
};
services.printing = {
enable = true;
drivers = [ pkgs.gutenprint ];
};
programs.dconf.enable = true;
services.tor = {
enable = true;
client.enable = true;
client.privoxy.enable = true;
torsocks.enable = true;
client.socksListenAddressFaster = "127.0.0.1:9063";
};
programs.mosh.enable = true;
services.fwupd.enable = true;
services.avahi.enable = true;
systemd.services.systemd-udev-settle.enable = false;
services.nix-serve.enable = config.device == "AMD-Workstation";
services.pcscd.enable = true;
services.keybase.enable = true;
services.upower.enable = true;
virtualisation.docker.enable = config.deviceSpecific.isHost;
virtualisation.libvirtd = {
enable = config.deviceSpecific.isHost;
};
networking.firewall.trustedInterfaces = [ "eth0" ];
services.nginx.enable = config.device == "AMD-Workstation";
services.vsftpd = {
enable = config.device == "AMD-Workstation";
anonymousUser = true;
allowWriteableChroot = true;
anonymousMkdirEnable = true;
anonymousUploadEnable = true;
writeEnable = true;
};
services.jitsi-meet = {
enable = config.device == "AMD-Workstation";
hostName = "meet.balsoft.ru";
};
services.nginx.virtualHosts.${config.services.jitsi-meet.hostName} = {
enableACME = true;
forceSSL = true;
};
virtualisation.spiceUSBRedirection.enable = true;
}