nixos/hosts/server/configuration.nix

# Edit this configuration file to define what should be installed on
# your system. Help is available in the configuration.nix(5) man page, on
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).

{ config, lib, pkgs, inputs,... }:
{
  # Note this might jump back and forth as kernels are added or removed.
#  boot.kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
#boot.kernelModules = [ "zfs" ];
    imports =
    [ # Include the results of the hardware scan.
      ../../common/configuration.nix
      ../../modules/nix/cache-client.nix
      ../../modules/nix/remote-builder-client.nix
    ];

    
  networking.hostName = "server"; # Define your hostname.
    networking.hostId = "6689f93e";
  # Pick only one of the below networking options.
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
  boot.supportedFilesystems = [ "zfs" ];
  boot.zfs.forceImportRoot = false;
  boot.zfs.package = pkgs.zfs_unstable;
  #boot.zfs.enabled = true;
  # Mount server data
  #fileSystems."/srv" = {
  #  device = "/dev/disk/by-label/server-data";
  #  fsType = "ext4";
  #  options = [ "defaults" ];
  #};

  #fileSystems."/backup" = {
  #  device = "/dev/disk/by-label/backup-data";
  #  fsType = "ext4";
  #  options = [ "defaults" ];
  #};

#Add sym links to data on users home folder
#system.userActivationScripts.createDockerSymlink.text = ''
#  ln -sf /srv/scripts /home/nixos/scripts
#'';
#system.userActivationScripts.createSetupSymlink.text = ''
#  ln -sf /mnt/docker-persistent-data/setup /home/nixos/setup
#'';
boot.postBootCommands = ''
  echo "=== STARTING ZPOOL IMPORT ==="
  ${pkgs.zfs_unstable}/bin/zpool import -a -N -d /dev/disk/by-path
  ${pkgs.zfs_unstable}/bin/zpool status
  ${pkgs.zfs_unstable}/bin/zfs mount -a
  ${pkgs.zfs_unstable}/bin/zfs list
    echo "=== ZPOOL IMPORT COMPLETE ==="
'';
    services.zfs = {
    autoScrub.enable = true;
    autoSnapshot.enable = true;
    trim.enable = true;
  };

systemd.services.zfs-import-cache.enable = true;
systemd.services.zfs-mount.enable = true;
boot.zfs.devNodes = "/dev/disk/by-id";
    
systemd.services.nfs-server = {
  after = [ "zfs-mount.service" ];
  requires = [ "zfs-mount.service" ];
};
    
services.nfs.server = {
  enable = true;
  exports = ''
    /tank/docker/config 192.168.2.0/24(rw,sync,no_subtree_check,no_root_squash)
    /tank/docker/volumes 192.168.2.0/24(rw,sync,no_subtree_check,no_root_squash)
    /tank/docker/databases 192.168.2.0/24(rw,sync,no_subtree_check,no_root_squash)
    /tank/docker/nextcloud-data 192.168.2.0/24(rw,sync,no_subtree_check,no_root_squash)
    '';
};

  security.sudo = {
    enable = true;
#    extraRules = [
#      {
#        users = [ "nixos" ];
#        commands = [
#          {
#            command = "/run/current-system/sw/bin/rsync";
#            options = [ "NOPASSWD" ];
#          }
#        ];
#      }
#    ];
  };


 # systemd.services.backup = {
 #   description = "Backup data";
 #   wantedBy = [ "multi-user.target" ];

#    serviceConfig = {
#      Type = "oneshot";
#      User = "root";
#      WorkingDirectory = "/home/nixos/scripts";
#      ExecStart = "${pkgs.bash}/bin/bash -e /srv/scripts/rsync.sh";
#      StandardOutput = "journal";
#      StandardError = "journal";
#    };
#path = with pkgs; [ bash rsync openssh coreutils ];
#  };


#systemd.timers.backup = {
#  description = "Daily backup";
#  wantedBy = [ "timers.target" ];
#  timerConfig = {
#    OnUnitActiveSec = "1d";       # Run every day after last run
#    Persistent = true;            # Catch up if system was off
#  };
#};

#  networking.wireguard.enable = true;
#  networking.wireguard.interfaces.wg0 = {
#    ips = [ "10.100.0.254/24" ];
#    listenPort = 51820;
#    privateKeyFile = "/etc/wireguard/server.key";

#    peers = [
#      {
#        publicKey = "cA30PTE/2gMbIhtAXaRPJkQeDc7/UWoA6eK3K+Xpsww=";
#        allowedIPs = [ "10.100.0.2/32" ];
#      }
#    ];
#  };

  # Allow WireGuard UDP port in firewall
#  networking.firewall.allowedUDPPorts = [ 51820 ];

  # Enable IPv4 forwarding
#  boot.kernel.sysctl = {
#    "net.ipv4.ip_forward" = 1;
#  };

  # NAT: lets LAN devices reply to the Pi without needing routes on the LAN router
#  networking.nat = {
#    enable = true;
#    externalInterface = "enp0s18";
#    internalInterfaces = [ "wg0" ];
#  };
services.prometheus.exporters.node = {
  enable = true;
  openFirewall = true;
};

#  services.openssh.settings.PermitRootLogin = "yes";
  # Open ports in the firewall.
  networking.firewall.allowedTCPPorts = [ 2049 111 ];
#  networking.firewall.allowedUDPPorts = [ 111 2049 20048 ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;

  # Copy the NixOS configuration file and link it from the resulting system
  # (/run/current-system/configuration.nix). This is useful in case you
  # accidentally delete configuration.nix.
  # system.copySystemConfiguration = true;

  # This option defines the first version of NixOS you have installed on this particular machine,
  # and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
  #
  # Most users should NEVER change this value after the initial install, for any reason,
  # even if you've upgraded your system to a new NixOS release.
  #
  # This value does NOT affect the Nixpkgs version your packages and OS are pulled from,
  # so changing it will NOT upgrade your system - see https://nixos.org/manual/nixos/stable/#sec-upgrading for how
  # to actually do that.
  #
  # This value being lower than the current NixOS release does NOT mean your system is
  # out of date, out of support, or vulnerable.
  #
  # Do NOT change this value unless you have manually inspected all the changes it would make to your configuration,
  # and migrated your data accordingly.
  #
  # For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.sta>
  system.stateVersion = "25.05"; # Did you read the comment?
}