move stuff to shared-services

hosts/nuc/configuration.nix

@@ -6,14 +6,14 @@
     ../../common
 
     # services
-    ./pulseaudio.nix
-    ./nfs-server.nix
-    ./mpd.nix
-    ./ympd.nix
-    ./spotifyd.nix
-    ./desktop.nix
-    ./vnc.nix
-    ./webserver.nix
+    ../../shared-services/pulseaudio.nix
+    ../../shared-services/nfs-server.nix
+    ../../shared-services/mpd.nix
+    ../../shared-services/ympd.nix
+    ../../shared-services/spotifyd.nix
+    ../../shared-services/desktop.nix
+    ../../shared-services/vnc.nix
+    ../../shared-services/webserver.nix
   ];
 
   networking.hostName = "nuc";

hosts/nuc/desktop.nix

@@ -1,53 +0,0 @@
-{ pkgs, ... }:
-
-{
-  users.mutableUsers = false;
-  users.users.c3h = {
-    isNormalUser = true;
-    password = "c3h";
-    extraGroups = [ "wheel" ];
-    packages = with pkgs; [ chromium firefox mpv youtube-dl ];
-  };
-
-  services.xserver = {
-    enable = true;
-    layout = "de";
-
-    videoDrivers = [ "modesetting" ];
-    useGlamor = true;
-
-    displayManager.lightdm.enable = true;
-    displayManager.autoLogin.enable = true;
-    displayManager.autoLogin.user = "c3h";
-
-    desktopManager.mate.enable = true;
-  };
-
-  programs.chromium = {
-    enable = true;
-    extensions = [
-      "cjpalhdlnbpafiamejdnhcphjbkeiagm" # ublock origin
-    ];
-    extraOpts = {
-      DefaultSearchProviderEnabled = true;
-      DefaultSearchProviderName = "DuckDuckGo";
-      DefaultSearchProviderIconURL = "https://duckduckgo.com/favicon.ico";
-      DefaultSearchProviderSearchURL = "https://duckduckgo.com/?q={searchTerms}";
-      DefaultSearchProviderSuggestURL = "https://duckduckgo.com/ac/?q={searchTerms}&type=list";
-
-      DefaultBrowserSettingEnabled = false;
-      BlockThirdPartyCookies = true;
-
-      BrowserSignin = 0;
-      SyncDisabled = true;
-      PasswordManagerEnabled = false;
-
-      # Send less data to Google
-      SafeBrowsingProtectionLevel = 0;
-      UrlKeyedAnonymizedDataCollectionEnabled = false;
-      SafeBrowsingExtendedReportingEnabled = false;
-      SpellCheckServiceEnabled = false;
-      AdvancedProtectionAllowed = false;
-    };
-  };
-}

hosts/nuc/mpd.nix

@@ -1,18 +0,0 @@
-{ config, ... }:
-
-{
-  services.mpd = {
-    enable = true;
-    musicDirectory = "/mnt/Music";
-    network.listenAddress = "any";
-    extraConfig = ''
-      audio_output {
-        type "pulse"
-        name "pulse audio"
-        server "localhost"
-      }
-    '';
-  };
-
-  networking.firewall.allowedTCPPorts = [ config.services.mpd.network.port ];
-}

hosts/nuc/nfs-server.nix

@@ -1,17 +0,0 @@
-{ ... }:
-
-{
-  services.nfs.server = {
-    enable = true;
-    exports = ''
-      /mnt 10.23.42.0/24(rw,fsid=0,insecure,no_subtree_check)
-    '';
-
-    statdPort = 4000;
-    lockdPort = 4001;
-    mountdPort = 4002;
-  };
-
-  networking.firewall.interfaces.enp3s0.allowedTCPPorts = [ 2049 4000 4001 4002 111 ];
-  networking.firewall.interfaces.enp3s0.allowedUDPPorts = [ 2049 4000 4001 4002 111 ];
-}

hosts/nuc/pulseaudio.nix

@@ -1,11 +0,0 @@
-{ pkgs, ... }:
-
-{
-  networking.firewall.allowedTCPPorts = [ 4713 ];
-  sound.enable = true;
-  hardware.pulseaudio.enable = true;
-  hardware.pulseaudio.systemWide = true;
-  hardware.pulseaudio.package = pkgs.pulseaudio;
-  hardware.pulseaudio.tcp.enable = true;
-  hardware.pulseaudio.tcp.anonymousClients.allowedIpRanges = [ "127.0.0.0/8" "::/64" "10.23.42.0/24" ];
-}

hosts/nuc/spotifyd.nix

@@ -1,12 +0,0 @@
-{ ... }:
-
-{
-  services.spotifyd = {
-    enable = true;
-    config = ''
-      zeroconf_port = 18572
-    '';
-  };
-
-  networking.firewall.allowedTCPPorts = [ 18572 ];
-}

hosts/nuc/vnc.nix

@@ -1,15 +0,0 @@
-{ pkgs, ... }:
-
-{
-  systemd.user.services.x11vnc = {
-    wantedBy = [ "graphical-session.target" ];
-    requires = [ "graphical-session-pre.target" ];
-    after = [ "graphical-session-pre.target" ];
-
-    serviceConfig = {
-      ExecStart = "${pkgs.x11vnc}/bin/x11vnc -rfbport 5900 -forever -shared";
-    };
-  };
-
-  networking.firewall.allowedTCPPorts = [ 5900 ];
-}

hosts/nuc/webserver.nix

@@ -1,9 +0,0 @@
-{ ... }:
-
-{
-  services.nginx = {
-    enable = true;
-  };
-
-  networking.firewall.allowedTCPPorts = [ 80 ];
-}

hosts/nuc/ympd.nix

@@ -1,30 +0,0 @@
-{ config, pkgs, ... }:
-
-let
-  # well-maintained fork
-  ympd = pkgs.ympd.overrideAttrs (old: {
-    version = "unstable-2021-05-21";
-    src = pkgs.fetchFromGitHub {
-      owner = "SuperBFG7";
-      repo = "ympd";
-      rev = "9d1a3ccfb25d011890bb90fe4ff6aaed51ffa2c4";
-      sha256 = "0is2fwfmacm91yq5b22184hjyhb6i49f35dik0v3vnqkk49v565c";
-    };
-  });
-
-in {
-  systemd.services.ympd = {
-    wantedBy = [ "multi-user.target" ];
-    serviceConfig = {
-      DynamicUser = true;
-      ExecStart = "${ympd}/bin/ympd --host localhost --port ${toString config.services.mpd.network.port} --webport 8062";
-    };
-  };
-
-  services.nginx.virtualHosts.default = {
-    locations."/ympd/" = {
-      proxyPass = "http://localhost:8062/";
-      proxyWebsockets = true;
-    };
-  };
-}