mio-ops/networks/linode-common.nix

# NixOps configuration common to Linode VMs

{ config, pkgs, lib, ... }:

{
  imports = [ ../profiles/host_common.nix ../profiles/server_common.nix ];

  # Ensure the right package architecture is used
  nixpkgs.localSystem = {
    system = "x86_64-linux";
    config = "x86_64-unknown-linux-gnu";
  };

  # Tools that Linode support like to have install if you need them.
  environment.systemPackages = with pkgs; [ inetutils mtr sysstat ];

  # Configure firewall defaults:
  networking = {
    usePredictableInterfaceNames = false; # As per Linode's networking guidlines
    domain = "mcwhirter.io";
    interfaces.eth0.useDHCP = true;
    firewall = {
      enable = true;
      allowedTCPPorts = [ 80 443 ];
      trustedInterfaces = [ "lo" ];
    };
  };

}