nixfiles/hosts/dn42-ildix-service/configuration.nix

{ config, pkgs, lib, ... }:

{
  imports =
    [
      ./hardware-configuration.nix
      ../../configuration/proxmox-vm
      ./bird.nix
      ./fernglas.nix
    ];

  # Use the GRUB 2 boot loader.
  boot.loader.grub.enable = true;
  # boot.loader.grub.efiSupport = true;
  # boot.loader.grub.efiInstallAsRemovable = true;
  # boot.loader.efi.efiSysMountPoint = "/boot/efi";
  # Define on which hard drive you want to install Grub.
  boot.loader.grub.device = "/dev/vda"; # or "nodev" for efi only


  networking.hostName = "dn42-ildix-service";

  networking.useDHCP = false;
  networking.interfaces.lo.ipv6.addresses = [
    { address = "fd81:edb3:71d8::1"; prefixLength = 128; }
    { address = "fd81:edb3:71d8::53"; prefixLength = 128; }
  ];
  # VM Nat Netz mercury
  networking.interfaces.ens18.ipv4.addresses = [ { address = "192.168.10.28"; prefixLength = 24; } ];
  # ildix peering lan
  networking.interfaces.ens19.ipv6.addresses = [ { address = "fd81:edb3:71d8:ffff:2953::1"; prefixLength = 64; } ];
  # IPv6 Uplink
  networking.interfaces.ens20.ipv6.addresses = [ { address = "2001:638:904:ffc9::c"; prefixLength = 64; } ];

  networking.defaultGateway6 = { address = "2001:638:904:ffc9::1"; interface = "ens20"; };
  networking.defaultGateway = { address = "192.168.10.1"; interface = "ens18"; };
  networking.nameservers = [ "2001:638:904:ffcc::3" "2001:638:904:ffcc::4" "141.24.40.3" "141.24.40.4" ];

  services.nginx.enable = true;

  networking.firewall.allowedTCPPorts = [ 80 443 ];

  clerie.system-auto-upgrade = {
    allowReboot = true;
    autoUpgrade = true;
  };

  sops.secrets.wg-monitoring = {};

  clerie.monitoring = {
    enable = true;
    id = "391";
    pubkey = "Rfu2JLxAk0seAZgt43sOEAF69Z9uQaOjeNgM4jJF0h4=";
  };

  system.stateVersion = "23.05";
}