nix/roles/work.nix
Stefan Schwarz 49ae5f3981 work
2024-01-03 15:26:33 +01:00

75 lines
1.7 KiB
Nix

{ config, lib, pkgs, ... }:
let
unstable = import <nixos-unstable> { config.allowUnfree = true; };
cloudstation = pkgs.callPackage (import ../packages/cloudstation.nix) { };
nagstamon =
pkgs.libsForQt5.callPackage (import ../packages/nagstamon.nix) { };
in {
environment.variables = {
USE_GKE_GCLOUD_AUTH_PLUGIN = "True";
};
services.tailscale = {
enable = true;
package = unstable.tailscale;
};
security.pki.certificateFiles = [
../dotfiles/certs/NetzmarktCA.crt
../dotfiles/certs/vcenter.netzmarkt.lan.crt
];
networking.extraHosts = ''
10.100.7.11 mon.netzmarkt.de
85.10.233.162 live.bonedo.de
172.20.0.2 hubble.kind
172.20.0.2 dashboard.kind
172.20.0.2 grafana.kind
172.20.0.2 alert.kind
#192.168.2.111 hass.home.f2o.io
#127.0.0.1 auth-dev.thobits.com
127.0.0.1 database
127.0.0.1 youtube.com
127.0.0.1 www.youtube.com
'';
environment.systemPackages = with pkgs; [
(import ../packages/oc311.nix)
(import ../packages/oc46.nix)
(import ../packages/openshift-install-4.5.nix)
# (import ../packages/vaultsink.nix) needs opensource verson
cloudstation
nagstamon
yubikey-manager
anydesk
chromium
nodejs
drone-cli
govc
ttyd
unstable.discord
unstable.go-jira
(unstable.google-cloud-sdk.withExtraComponents [
unstable.google-cloud-sdk.components.gke-gcloud-auth-plugin
])
slack
unstable.velero
unstable.obs-studio
unstable.obs-studio-plugins.wlrobs
unstable.mindustry-wayland
prusa-slicer
];
# yubikey support
services.udev.packages = [ pkgs.yubikey-personalization ];
services.pcscd.enable = true;
}