# NixOps configuration common to Linode VMs

{ config, pkgs, lib, ... }:

{
  imports =
    [
      ../profiles/host_common.nix
      ../profiles/server_common.nix
    ];

  # Ensure the right package architecture is used
  nixpkgs.localSystem = {
    system = "x86_64-linux";
    config = "x86_64-unknown-linux-gnu";
  };

  # Tools that Linode support like to have install if you need them.
  environment.systemPackages = with pkgs; [
    inetutils
    mtr
    sysstat
  ];

  # Configure firewall defaults:
  networking = {
    usePredictableInterfaceNames = false; # As per Linode's networking guidlines
    domain = "jfdic.org";
    interfaces.eth0.useDHCP = true;
    firewall = {
      enable = true;
      allowedTCPPorts = [ 80 443 ];
      trustedInterfaces = [ "lo" ];
    };
  };

}