petersweb-infra/nixos/hetzner.nix

{modulesPath, ...}: {
  imports = [
    (modulesPath + "/installer/scan/not-detected.nix")
    (modulesPath + "/profiles/qemu-guest.nix")
  ];

  # Fixes iotop
  boot.kernel.sysctl = {"kernel.task_delayacct" = 1;};

  boot.loader.grub = {
    enable = true;
    device = "/dev/sda";
    efiSupport = false;
  };

  fileSystems."/" = {
    device = "/dev/disk/by-uuid/aaf104ce-4851-40d9-aeea-bebb5684f8c4";
    fsType = "ext4";
  };

  networking.useDHCP = false;
  systemd.network = {
    enable = true;
    networks."10-enp1s0" = {
      matchConfig.Name = "enp1s0";
      networkConfig.DHCP = "ipv4";
      dhcpV4Config = {
        UseGateway = false;
        UseRoutes = false;
      };
      routes = [
        {routeConfig = {Gateway = "172.31.1.1"; GatewayOnLink = true;};}
      ];
    };
  };

  services.openssh = {
    enable = true;
    settings.PasswordAuthentication = true;
    settings.PermitRootLogin = "yes";
    settings.AllowUsers = [ "root" ];
    extraConfig = ''
      PrintLastLog no
    '';
    hostKeys = [
      {
        bits = 4096;
        path = "/etc/ssh/ssh_host_rsa_key";
        type = "rsa";
      }
      {
        path = "/etc/ssh/ssh_host_ed25519_key";
        type = "ed25519";
      }

      # For secrets
      {
        path = "/root/.ssh/id_rsa_nix";
        type = "ed25519";
      }
    ];
  };
}