{ ... }: { imports = [ ./hardware-configuration.nix ../../base.nix ]; my = { emacs.enable = true; apps.dictionaries.enable = true; services = { network.enable = true; wireguard.enable = true; }; enableProxy = true; shell = { tools.enable = true; multimedia.enable = true; }; dev = { nix.enable = true; python.enable = true; sh.enable = true; }; units = { download.enable = true; stream-dl.enable = true; }; scripts = { run.enable = true; split-dir.enable = true; download.enable = true; stream-dl.enable = true; ffmpreg.enable = true; ffmpeg4discord.enable = true; pika-list.enable = true; find-dup-episodes.enable = true; update-dns.enable = true; }; servers = { jellyfin = { enableProxy = true; hostName = "server"; }; plex = { enableProxy = true; hostName = "server"; }; nextcloud = { enable = true; enableCron = true; enableProxy = true; }; audiobookshelf = { enable = true; enableProxy = true; }; bazarr = { enableProxy = true; hostName = "server"; }; collabora = { enable = true; enableProxy = true; }; homepage = { enable = true; enableProxy = true; }; kavita = { enableProxy = true; hostName = "server"; }; lidarr = { enableProxy = true; hostName = "server"; }; maloja = { enable = true; enableProxy = true; }; mealie = { enable = true; enableProxy = true; }; microbin = { enable = true; enableProxy = true; }; multi-scrobbler = { enable = true; enableProxy = true; }; paperless.enable = true; postgres.enable = true; prowlarr = { enableProxy = true; hostName = "server"; }; qbittorrent.enable = true; radarr = { enableProxy = true; hostName = "server"; }; ryot = { enable = true; enableProxy = true; }; shiori = { enable = true; enableProxy = true; }; sonarr = { enableProxy = true; hostName = "server"; }; vaultwarden = { enable = true; enableProxy = true; }; }; }; networking = { hostName = "miniserver"; firewall = { allowedTCPPorts = [ 2049 ]; allowedUDPPorts = [ 2049 ]; }; }; nix = let featuresList = [ "nixos-test" "benchmark" "big-parallel" "kvm" "gccarch-znver3" "gccarch-skylake" "gccarch-alderlake" ]; in { settings.cores = 3; buildMachines = [ { hostName = "workstation"; system = "x86_64-linux"; sshUser = "nixremote"; maxJobs = 12; speedFactor = 1; supportedFeatures = featuresList; } ]; }; nixpkgs.config.permittedInsecurePackages = [ "openssl-1.1.1w" ]; users = { groups.nixremote.gid = 555; users.nixremote = { isNormalUser = true; createHome = true; group = "nixremote"; home = "/var/nixremote/"; openssh.authorizedKeys.keyFiles = [ ../../secrets/ssh/ed25519_nixworkstation.pub ]; }; }; services = { btrfs.autoScrub = { enable = true; fileSystems = [ "/" ]; }; minidlna = { enable = false; openFirewall = true; settings = { inotify = "yes"; media_dir = [ "/srv/pool/" ]; }; }; }; }