misc

nix-config/misc/mail.nix

@@ -0,0 +1,72 @@
+{ config, pkgs, lib, ... }:
+
+let
+  cfg = config.email;
+in
+
+### --> Mail notifications configuration
+{
+  options.email = {
+    enable = lib.mkEnableOption "Email sending functionality";
+    fromAddress = lib.mkOption {
+      description = "The 'from' address";
+      type = lib.types.str;
+      default = "no-reply@${DOMAIN_NAME}";
+    };
+    toAddress = lib.mkOption {
+      description = "The 'to' address";
+      type = lib.types.str;
+      default = "${EMAIL_ADDRESS}";
+    };
+    smtpServer = lib.mkOption {
+      description = "The SMTP server address";
+      type = lib.types.str;
+      default = "${SENDER_EMAIL_DOMAIN}";
+    };
+    smtpUsername = lib.mkOption {
+      description = "The SMTP username";
+      type = lib.types.str;
+      default = "${SENDER_EMAIL_ADDRESS}";
+    };
+    smtpPasswordPath = lib.mkOption {
+      description = "Path to the secret containing SMTP password";
+      type = lib.types.path;
+      default = config.sops.secrets.sender_email_address_password.path;
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    programs.msmtp = {
+      enable = true;
+      accounts.default = {
+        auth = true;
+        host = config.email.smtpServer;
+        from = config.email.fromAddress;
+        user = config.email.smtpUsername;
+        tls = true;
+        passwordeval = "${pkgs.coreutils}/bin/cat ${config.email.smtpPasswordPath}";
+      };
+    };
+  };
+### Mail notifications configuration <--
+
+
+
+### --> SMART disk heath
+  services.smartd = {
+    enable = true;
+    defaults.autodetected = "-a -o on -S on -s (S/../.././00|L/../../6/01) -n standby,q";
+    notifications = {
+      wall = {
+        enable = true;
+      };
+      mail = {
+        enable = true;
+        sender = config.email.fromAddress;
+        recipient = config.email.toAddress;
+      };
+    };
+  };
+### SMART disk heath <--
+
+}

nix-config/misc/networking.nix

@@ -0,0 +1,37 @@
+{ config, pkgs, lib, ... }:
+
+{
+  # Hostname
+  networking.hostName = "numbus-server";
+
+  # Enable networking and firewall
+  networking.interfaces.eth0.ipv4.addresses = [
+    {
+      address = "HOME_SERVER_IP";
+      prefixLength = 24;
+    }
+  ];
+  networking.defaultGateway = "HOME_ROUTER_IP";
+  networking.nameservers = [ "HOME_SERVER_IP" "9.9.9.9" ];
+  networking.networkmanager.enable = true;
+  networking.nftables.enable = true;
+  networking.firewall.enable = true;
+
+  networking.nftables.tables.nat = {
+    family = "ip";
+    content = ''
+      chain prerouting {
+        type nat hook prerouting priority dstnat; policy accept;
+        tcp dport 80 redirect to :8080
+        tcp dport 443 redirect to :8443
+        tcp dport 53 redirect to :5353
+        udp dport 53 redirect to :5353
+      }
+    '';
+  };
+
+  # Open ports in the firewall
+  networking.firewall.allowPing = true;
+  networking.firewall.allowedTCPPorts = [ 53 80 443 ];
+  networking.firewall.allowedUDPPorts = [ 53 ];
+}