dotfiles/system/hosts/server/options.nix
2023-11-25 00:30:25 +07:00

65 lines
1.9 KiB
Nix

{ lib
, ... }:
{
options.server = with lib; mkOption {
type = types.submodule {
options = {
domainName = mkOption {
type = types.str;
default = "pavluk.org";
description = "domain name";
};
laptopHostname = mkOption {
type = with types; nullOr str;
default = null;
description = "laptop hostname";
};
laptopPublicKey = mkOption {
type = with types; nullOr str;
default = null;
description = "laptop public ssh key";
};
keycloakRealm = mkOption {
type = types.str;
default = "master";
description = "keycloak realm";
};
lanCidrV4 = mkOption {
type = types.str;
description = "LAN mask (IPv4)";
example = "192.168.1.0/24";
default = "0.0.0.0/0";
};
lanCidrV6 = mkOption {
type = types.str;
description = "LAN mask (IPv6)";
example = "fd01:abcd::/64";
default = "::/0";
};
localIpV4 = mkOption {
type = with types; nullOr str;
description = "server's local IPv4 address";
example = "192.168.1.2";
default = null;
};
localIpV6 = mkOption {
type = with types; nullOr str;
description = "server's local IPv6 address";
example = "fd01:abcd::2";
default = null;
};
hashedNoreplyPassword = mkOption {
type = types.str;
description = "hashed noreply password via mkpasswd -sm bcrypt for external access";
};
unhashedNoreplyPassword = mkOption {
type = types.str;
description = "unhashed noreply password for internal access only. \
This should be different from the password that is hashed for better security";
};
};
};
description = "server settings";
};
}