initial commit

2026-04-19 14:58:51 -03:00
parent 3ac4eb5503
commit 5f85583bd0
32 changed files with 2222 additions and 0 deletions
@@ -0,0 +1,71 @@
+{
+  config,
+  lib,
+  inputs,
+  pkgs,
+  ...
+}:
+{
+
+  ## tailscale
+  services.tailscale = {
+    enable = true;
+    extraUpFlags = [
+      "--exit-node-allow-lan-access=true"
+      "--ssh"
+      "--accept-dns=true"
+    ];
+  };
+  networking.nftables.enable = true;
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [
+      47984
+      47989
+      48910
+    ];
+    allowedUDPPortRanges = [
+      {
+        from = 47998;
+        to = 48000;
+      }
+      {
+        from = 48002;
+        to = 48010;
+      }
+    ];
+    trustedInterfaces = [ "tailscale0" ];
+    allowedUDPPorts = [ config.services.tailscale.port ];
+  };
+
+  ## Configuraçao de Docker
+
+  boot.kernel.sysctl = {
+    "net.ipv4.ip_unprivileged_port_start" = 53;
+    "net.ipv6.conf.all.forwarding" = true;
+  };
+
+  users.users.gui.extraGroups = [ "docker" ];
+  users.groups.docker.gid = 131;
+  virtualisation.docker = {
+    enable = true;
+
+    #rootless = {
+    #  enable = true;
+    #  setSocketVariable = true;
+    #};
+  };
+
+  services.openssh = {
+    enable = true;
+  };
+
+  services.sunshine = {
+    enable = true;
+    autoStart = true;
+    capSysAdmin = true;
+    openFirewall = true;
+
+  };
+
+}