reciproka-ops/networks/linode-common.nix

# NixOps configuration common to Linode VMs
{
  config,
  pkgs,
  lib,
  ...
}: {
  imports = [
    ../profiles/host_common.nix
    ../profiles/server_common.nix
  ];

  # Ensure the right package architecture is used
  nixpkgs.localSystem = {
    system = "x86_64-linux";
    config = "x86_64-unknown-linux-gnu";
  };

  # Tools that Linode support like to have install if you need them.
  environment.systemPackages = with pkgs; [
    inetutils
    mtr
    sysstat
  ];

  # Configure firewall defaults:
  networking = {
    usePredictableInterfaceNames = false; # As per Linode's networking guidlines
    domain = "jfdic.org";
    interfaces.eth0.useDHCP = true;
    firewall = {
      enable = true;
      allowedTCPPorts = [80 443];
      trustedInterfaces = ["lo"];
    };
  };
}