65 lines
1.9 KiB
Nix
65 lines
1.9 KiB
Nix
{ lib
|
|
, ... }:
|
|
{
|
|
options.server = with lib; mkOption {
|
|
type = types.submodule {
|
|
options = {
|
|
domainName = mkOption {
|
|
type = types.str;
|
|
default = "pavluk.org";
|
|
description = "domain name";
|
|
};
|
|
laptopHostname = mkOption {
|
|
type = with types; nullOr str;
|
|
default = null;
|
|
description = "laptop hostname";
|
|
};
|
|
laptopPublicKey = mkOption {
|
|
type = with types; nullOr str;
|
|
default = null;
|
|
description = "laptop public ssh key";
|
|
};
|
|
keycloakRealm = mkOption {
|
|
type = types.str;
|
|
default = "master";
|
|
description = "keycloak realm";
|
|
};
|
|
lanCidrV4 = mkOption {
|
|
type = types.str;
|
|
description = "LAN mask (IPv4)";
|
|
example = "192.168.1.0/24";
|
|
default = "0.0.0.0/0";
|
|
};
|
|
lanCidrV6 = mkOption {
|
|
type = types.str;
|
|
description = "LAN mask (IPv6)";
|
|
example = "fd01:abcd::/64";
|
|
default = "::/0";
|
|
};
|
|
localIpV4 = mkOption {
|
|
type = with types; nullOr str;
|
|
description = "server's local IPv4 address";
|
|
example = "192.168.1.2";
|
|
default = null;
|
|
};
|
|
localIpV6 = mkOption {
|
|
type = with types; nullOr str;
|
|
description = "server's local IPv6 address";
|
|
example = "fd01:abcd::2";
|
|
default = null;
|
|
};
|
|
hashedNoreplyPassword = mkOption {
|
|
type = types.str;
|
|
description = "hashed noreply password via mkpasswd -sm bcrypt for external access";
|
|
};
|
|
unhashedNoreplyPassword = mkOption {
|
|
type = types.str;
|
|
description = "unhashed noreply password for internal access only. \
|
|
This should be different from the password that is hashed for better security";
|
|
};
|
|
};
|
|
};
|
|
description = "server settings";
|
|
};
|
|
}
|