disable spaceboyz backup. Add cockpit

.gitignore

@@ -1 +1,2 @@
 result
+domainhash.txt

configuration.nix

@@ -5,6 +5,10 @@
 { config, lib, pkgs, ... }:
 
 {
+
+  system.autoUpgrade.enable = true;
+  system.autoUpgrade.allowReboot = true;
+
   console.keyMap = "de";
 
   imports =
@@ -12,15 +16,22 @@
       ./hardware-configuration.nix
 
       # meine module
-      ./modules/cron.nix
-      ./modules/users.nix
-      ./modules/storage.nix
-      ./modules/root-programs.nix
-      ./modules/smb.nix
-      ./modules/tailscale.nix
-      ./modules/tmux.nix
-#      ./modules/minetest-server.nix
-#      ./modules/wifi.nix ## noch kein device gefunden das geht. das kleine dwa-171 geht nicht
+      modules/tmux.nix
+      # in das backup von cloud.boogiedev.net umwandeln: modules/cron.nix
+      modules/users.nix
+      modules/storage.nix
+      modules/root-programs.nix
+      modules/smb.nix
+      modules/tailscale.nix
+      modules/veracrypt.nix
+      modules/cockpit.nix
+
+      #Server
+      modules/nextcloud.nix
+#      modules/minetest-server.nix
+
+     #Hardware
+#      modules/wifi.nix ## noch kein device gefunden das geht. das kleine dwa-171 geht nicht
      ];
 
   # Use the GRUB 2 boot loader.
@@ -32,8 +43,6 @@
   # boot.loader.grub.device = "/dev/disk/by-label/nixos";   #"/dev/sda";   # or "nodev" for efi only
   boot.loader.grub.device = "/dev/disk/by-id/ata-TOSHIBA_MK5061GSY_3273P0RAT";
 
-
-
   networking.hostName = "bfds"; # Define your hostname.
   # Pick only one of the below networking options.
   # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.

dot-files/.bashrc

@@ -0,0 +1,31 @@
+## bash prompt styling
+PS1="\[\e[32m\][\u@\h\]]:\[\e[34m\]\w\[\e[0m\]# "
+
+echo "## Mache ssh key verfügbar##"
+eval "$(ssh-agent -s)"
+ssh-add ~/.ssh/id_bfds_gitea
+
+echo
+echo "=============="
+echo "## Wechsel zu aktueller NixOS config Verzeichnis ##"
+echo "## run: git status"
+cd /etc/nixos/
+git status
+
+echo 
+echo "=============="
+alias tmuxxx='tmux -f /etc/nixos/dot-files/.tmux.conf new -d -s mainsession'
+alias tmuxx='tmux -f /etc/nixos/dot-files/.tmux.conf attach -t mainsession'
+    
+### !! if not running inside tmux, ask user to start tmux or create session !!
+if [ -z "$TMUX" ]; then
+    if ! tmux ls &> /dev/null; then
+        tmuxxx
+    fi
+
+    read -p "tmux starten (tmuxx / tmuxxx)? (j/n): " answer
+    if [ "$answer" = "j" ] || [ "$answer" = "y" ]; then
+        tmuxx
+    fi
+fi
+### !! if not running inside tmux !!

dot-files/.tmux.conf

@@ -1,6 +1,6 @@
-set -g default-shell /bin/bash
-set -g default-command /bin/bash
-set-option -g default-shell /bin/bash
+set -g default-shell /run/current-system/sw/bin/bash
+set -g default-command bash
+set-option -g default-shell /run/current-system/sw/bin/bash
 
 set-window-option -g automatic-rename on
 
@@ -18,7 +18,7 @@ set -g history-limit 3000
 set -g status-interval 60
 ##set -g status-left '#H#[default]'  ##computername augeblendet, weil letzte Zeichen abgeschnitten
 set-option -g status-right-length 200
-set -g status-right 'ƒ #(~/code/lokale-scripte/show-disk-usage.sh) ƒ Akku: #(~/code/lokale-scripte/akku.sh) ƒ %d-%m-%Y ƒ %H:%M:%S'
+set -g status-right '%Y-%m-%d ƒ %H:%M:%S'
 setw -g monitor-activity on
 set -g visual-activity on
 #setw -g mode-keys copy-mode-vi

modules/cockpit.nix

@@ -0,0 +1,17 @@
+{ config, pkgs, ... }:
+
+{
+  environment.systemPackages = with pkgs; [
+      cockpit # cockpit
+  ];
+
+  services.cockpit = {
+    enable = true;
+    port = 9090;
+    settings = {
+      WebService = {
+        AllowUnencrypted = true;
+      };
+    };
+  };
+}

modules/nextcloud.nix

@@ -0,0 +1,44 @@
+{ pkgs, ... }:
+{
+  services.nextcloud = {
+    package = pkgs.nextcloud29;
+    enable = true;
+    hostName = "bfds.taila388c.ts.net";
+    settings.trusted_domains = [ "bfds" "bfds.local" ];
+    settings.log_Type = "file";
+
+    database.createLocally = true;
+    config = {
+       dbtype = "pgsql"; 
+       adminpassFile = "/var/lib/nextcloud-pass-files/nc-admin-password";
+    };
+    extraApps = {
+      inherit (pkgs.nextcloud29Packages.apps) 
+	cookbook notes deck;
+
+        money = pkgs.fetchNextcloudApp {
+            #get the hash via: $ nix-prefetch-url --unpack <app zip url>
+            sha256 = "13lwpq75ihz9lfq383bi86lqvzcir8aqqhf56zs7fsayqh32l2r4";
+            url = "https://github.com/powerpaul17/nc_money/releases/download/v0.26.6/money.tar.gz";
+            license = "gpl3";
+        };
+    };
+    extraAppsEnable = true;
+    https = true;
+  }; 
+
+  services.nginx.virtualHosts."bfds.taila388c.ts.net" = {
+#    addSSL = true; 
+    forceSSL = true;
+    enableACME = true;
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "rw@boogiedev.net";   
+    certs = { 
+      "bfds.taila388c.ts.net".email = "rw@boogiedev.net"; 
+    }; 
+  };
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+}

modules/root-programs.nix

@@ -7,14 +7,23 @@
     usbutils  
     wget
     nano
-    git 
+    git
+    tig 
     mc
     ncdu
     parted
     gpart
     tmux
     hdparm
+    unzip
 
-    python3    
+    #coding
+    python3
+
+    #network
+    dig
+
+    #lets encrypt
+    lego
    ];
 }

modules/smb.nix

@@ -18,6 +18,19 @@
     securityType = "user";
 
     extraConfig = ''
+
+      # Server-seitige SMB-Signatur erzwingen
+      server signing = mandatory
+      client signing = mandatory
+
+      # Aktiviert die Unterstützung für SMB2 und SMB3
+      server min protocol = SMB2
+      server max protocol = SMB3
+
+      # Erlaubt sichere Negotation von Verbindungen
+      client min protocol = SMB2
+      client max protocol = SMB3
+
       workgroup = WORKGROUP
       server string = BFDS
       netbios name = BFDS

modules/tmux.nix

@@ -1,22 +1,11 @@
 { pkgs, ... }:
 
-
 {
   programs.tmux = {
     enable = true;
 #    clock24 = true;
-    extraConfig = ''
-     ## default config aus meinen dotfiles
-     `echo "$(cat /etc/nixos/dot-files/.tmux.conf)"`
-     
-     ## individuelle config für bfds
     
-     ### colors ###
-     # Ändern der Farbe des Rahmens auf Gelb
-     set -g pane-border-fg yellow
-     # Ändern der Hintergrundfarbe des Rahmens auf Blau
-     set -g pane-active-border-bg blue
-
+    extraConfig = ''
     '';
   };
 

modules/veracrypt.nix

@@ -0,0 +1,14 @@
+{ config, lib, pkgs, ... }:
+
+{
+  nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) 
+  [
+    "veracrypt"
+  ];
+
+
+
+  environment.systemPackages = [
+    pkgs.veracrypt
+  ];
+}