mirror of https://github.com/voidlizard/hbs2
170 lines
4.6 KiB
Nix
170 lines
4.6 KiB
Nix
# See how this flake is used in ./usage.sh
|
|
# on host: sudo sysctl -w net.ipv4.ip_forward=1
|
|
{
|
|
description = "hbs2-container";
|
|
|
|
inputs = {
|
|
extra-container.url = "github:erikarvstedt/extra-container";
|
|
nixpkgs.url = "github:nixos/nixpkgs/nixpkgs-unstable";
|
|
hbs2.url =
|
|
"git+http://git.hbs2/BTThPdHKF8XnEq4m6wzbKHKA6geLFK4ydYhBXAqBdHSP?ref=totally-new-download&rev=a6e955aa611c3f9485976ce7eba33570a43f2eb7";
|
|
hbs2.inputs.nixpkgs.follows = "nixpkgs";
|
|
|
|
home-manager.url = "github:nix-community/home-manager";
|
|
home-manager.inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
|
|
outputs = { extra-container, nixpkgs, home-manager, ... }@inputs:
|
|
extra-container.inputs.flake-utils.lib.eachSystem extra-container.lib.supportedSystems (system: {
|
|
packages.default = extra-container.lib.buildContainers {
|
|
# The system of the container host
|
|
inherit system;
|
|
|
|
# Only set this if the `system.stateVersion` of your container
|
|
# host is < 22.05
|
|
# legacyInstallDirs = true;
|
|
|
|
# Optional: Set nixpkgs.
|
|
# If unset, the nixpkgs input of extra-container flake is used
|
|
nixpkgs = inputs.nixpkgs;
|
|
|
|
|
|
# Set this to disable `nix run` support
|
|
# addRunner = false;
|
|
|
|
config = {
|
|
containers.hbs2-test = {
|
|
extra = {
|
|
addressPrefix = "10.250.0";
|
|
exposeLocalhost = true;
|
|
firewallAllowHost = true;
|
|
enableWAN = true;
|
|
};
|
|
|
|
config = { pkgs, ... }: {
|
|
|
|
|
|
imports = [
|
|
home-manager.nixosModules.home-manager
|
|
{
|
|
home-manager.useGlobalPkgs = true;
|
|
home-manager.useUserPackages = true;
|
|
home-manager.users.hbs2 = {
|
|
# import ./config/home.nix;
|
|
home.stateVersion = "23.05";
|
|
|
|
xdg.configFile = {
|
|
|
|
"hbs2-peer/default.key".text = ''
|
|
# hbs2 credentials file
|
|
# keep it private
|
|
|
|
rmbTHUgv7NPkygrgEbPWTjQbVTx9uwWJ7sJVQRKK7ygM73q5Q7JVYhpwfytK
|
|
kzoNq65jn1zDCUUMwLFzXeu4ETjG4bhYNM7FHU9xY4VdwEww156iJeoydJ2y
|
|
j1u3RJEr8kosBH2DR8XMY6Mj8s
|
|
'';
|
|
"hbs2-peer/config".text = ''
|
|
;; hbs2-peer config file
|
|
|
|
listen "0.0.0.0:7351"
|
|
listen-tcp "0.0.0.0:10351"
|
|
|
|
known-peer "10.250.0.1:7354"
|
|
|
|
; edit path to a keyring file
|
|
; key "./key"
|
|
key "./default.key"
|
|
'';
|
|
};
|
|
};
|
|
home-manager.extraSpecialArgs = {
|
|
# inherit inputs;
|
|
};
|
|
}
|
|
];
|
|
|
|
|
|
# settings.trusted-users = [ "root" "hbs2" ];
|
|
|
|
|
|
nix = {
|
|
package = pkgs.nixFlakes;
|
|
extraOptions = ''
|
|
experimental-features = nix-command flakes
|
|
'';
|
|
#settings.trusted-users = [ "root" "dmz" ];
|
|
};
|
|
|
|
users.users.hbs2 = {
|
|
isNormalUser = true;
|
|
home = "/home/hbs2";
|
|
packages = with pkgs; [];
|
|
};
|
|
|
|
systemd.services.hello = {
|
|
wantedBy = [ "multi-user.target" ];
|
|
script = ''
|
|
while true; do
|
|
echo hello | ${pkgs.netcat}/bin/nc -lN 50
|
|
done
|
|
'';
|
|
};
|
|
|
|
networking.firewall.enable = false;
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
inputs.hbs2.packages.${pkgs.system}.default
|
|
screen
|
|
tshark
|
|
tmux
|
|
gitFull
|
|
iptables
|
|
];
|
|
|
|
environment.etc = {
|
|
"tmux.conf".source = ./tmux.conf;
|
|
};
|
|
|
|
# environment.xdg.data."hbs2/wtf" = {
|
|
# text = "pwned";
|
|
# };
|
|
|
|
environment.etc."hbs2-peer/key" = {
|
|
text = ''
|
|
# hbs2 credentials file
|
|
# keep it private
|
|
|
|
rmbTHUgv7NPkygrgEbPWTjQbVTx9uwWJ7sJVQRKK7ygM73q5Q7JVYhpwfytK
|
|
kzoNq65jn1zDCUUMwLFzXeu4ETjG4bhYNM7FHU9xY4VdwEww156iJeoydJ2y
|
|
j1u3RJEr8kosBH2DR8XMY6Mj8s
|
|
'';
|
|
};
|
|
|
|
environment.etc."hbs2-peer/config" = {
|
|
text = ''
|
|
listen "0.0.0.0:7351"
|
|
listen-tcp "0.0.0.0:3003"
|
|
rpc "127.0.0.1:13331"
|
|
http-port 5001
|
|
key "./key"
|
|
storage "/root/.local/share/hbs2"
|
|
accept-block-announce *
|
|
bootstrap-dns "bootstrap.hbs2.net"
|
|
known-peer "10.250.0.1:7354"
|
|
|
|
; poll reflog 1 "2YNGdnDBnciF1Kgmx1EZTjKUp1h5pvYAjrHoApbArpeX"
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
};
|
|
};
|
|
};
|
|
};
|
|
});
|
|
|
|
|
|
}
|