{ modulesPath, lib, ... }: { imports = lib.optional (builtins.pathExists ./do-userdata.nix) ./do-userdata.nix ++ [ ./hardware-configuration.nix ./gitea.nix ./nginx.nix ./coturn.nix ]; boot = { growPartition = true; kernelParams = [ "console=ttyS0" "panic=1" "boot.panic_on_fail" ]; initrd.kernelModules = [ "virtio_scsi" ]; kernelModules = [ "virtio_pci" "virtio_net" ]; loader = { grub.device = "/dev/sda"; timeout = 0; grub.configurationLimit = 0; }; }; services.openssh = { enable = true; passwordAuthentication = false; ports = [5522]; }; services.do-agent.enable = true; networking = { hostName = "sortug"; # use Digital Ocean metadata server }; networking.firewall = { enable = true; allowedTCPPorts = [ 40308 80 443 53 51820 5522 ]; allowedUDPPorts = [ 40308 80 443 53 51820 5522 50000 50001 50002 50003 50004 50005 50006 50007 50008 50009 50010 ]; }; }