nixfiles/config/hosts/seras/configuration.nix

{ pkgs, ... }: {
  imports = [
    ../../common
    ../../profiles/builder.nix
    ../../profiles/headless.nix
    ../../profiles/kartoffel.nix
    ../../profiles/lxc.nix
    ../../services/nginx.nix
    ../../services/hydra
    ../../services/update-nixfiles.nix
  ];
  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];

  networking.hostName = "seras";
  systemd.network.networks."98-eth-default" = {
    address = [
      "2a0f:be01:0:100::169/128" 
    ];
  };

  users.users.nil = {
    isNormalUser = true;
    shell = pkgs.fish;
    ignoreShellProgramCheck = true;
    extraGroups = [ "wheel" ];
    openssh.authorizedKeys.keys = [
      "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAICczPHRwY9MAwDGlcB0QgMOJjcpLJhVU3covrW9RBS62AAAABHNzaDo="
    ];
  };

  services.postgresql.settings = {
    max_connections = 200;
    shared_buffers = "24GB";
    effective_cache_size = "72GB";
    maintenance_work_mem = "2GB";
    checkpoint_completion_target = 0.9;
    wal_buffers = "16MB";
    default_statistics_target = 100;
    random_page_cost = 1.1;
    effective_io_concurrency = 200;
    work_mem = "31457kB";
    huge_pages = "try";
    min_wal_size = "1GB";
    max_wal_size = "4GB";
    max_worker_processes = 32;
    max_parallel_workers_per_gather = 4;
    max_parallel_workers = 32;
    max_parallel_maintenance_workers = 4;
  };

  kyouma.ooklaserver = {
    enable = true;
    openFirewall = true;
    domain = "speedtest.kyouma.net";
    settings.openSSL.server.minimumTLSProtocol = "1.3";
  };
}