{ lib , ... }: { options.server = with lib; mkOption { type = types.submodule { options = { domainName = mkOption { type = types.str; default = "pavluk.org"; description = "domain name"; }; laptopHostname = mkOption { type = with types; nullOr str; default = null; description = "laptop hostname"; }; laptopPublicKey = mkOption { type = with types; nullOr str; default = null; description = "laptop public ssh key"; }; keycloakRealm = mkOption { type = types.str; default = "master"; description = "keycloak realm"; }; lanCidrV4 = mkOption { type = types.str; description = "LAN mask (IPv4)"; example = "192.168.1.0/24"; default = "0.0.0.0/0"; }; lanCidrV6 = mkOption { type = types.str; description = "LAN mask (IPv6)"; example = "fd01:abcd::/64"; default = "::/0"; }; localIpV4 = mkOption { type = with types; nullOr str; description = "server's local IPv4 address"; example = "192.168.1.2"; default = null; }; localIpV6 = mkOption { type = with types; nullOr str; description = "server's local IPv6 address"; example = "fd01:abcd::2"; default = null; }; hashedNoreplyPassword = mkOption { type = types.str; description = "hashed noreply password via mkpasswd -sm bcrypt for external access"; }; unhashedNoreplyPassword = mkOption { type = types.str; description = "unhashed noreply password for internal access only. \ This should be different from the password that is hashed for better security"; }; }; }; description = "server settings"; }; }