# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ config, pkgs, ... }:

{
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
      # ./services/uplcg.nix
      ./services/chat.nix
      ./services/bahnhof-name.nix
      ./services/conduit.nix
      ./services/headscale.nix
    ];

  sops.defaultSopsFile = ../secrets/chaski.yaml;
  # This will automatically import SSH keys as age keys
  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];

  services.nginx.enable = true;
  services.nginx.package = pkgs.nginx.override { gd = null; };

  # Use the GRUB 2 boot loader.
  boot.loader.grub.enable = true;
  boot.loader.grub.devices = [ "/dev/sda" ];

  networking = {
    hostName = "chaski";

    enableIPv6 = true;
    defaultGateway6 = {
      address = "fe80::1";
      interface = "ens3";
    };

    interfaces.ens3.ipv6.addresses = [ {
      address = "2a01:4f9:c010:69ed::1";
      prefixLength = 64;
    } ];

    useDHCP = false;
    interfaces.ens10.useDHCP = true;
    interfaces.ens3.useDHCP = true;

    firewall.logRefusedConnections = false;
    firewall.allowedTCPPorts = [ 80 443 ];
  };
  system.stateVersion = "20.09"; # Did you read the comment?
}