headless-configuration.nix

{ modulesPath, lib, config, pkgs, ... }:
{
  imports = lib.optional (builtins.pathExists ./do-userdata.nix) ./do-userdata.nix ++ [
    (modulesPath + "/virtualisation/digital-ocean-config.nix")
  ];

  virtualisation.docker.enable = true;

  environment.systemPackages = with pkgs; [

    home-manager

    syncthing

  ] ++ (import ./shared/pkgs.nix pkgs);

  users.users.brian = {
    isNormalUser = true;
    description = "Brian Dawn";
    extraGroups = [ "wheel" "docker" ];
  };

  services = {
    syncthing = {
      enable = true;
      user = "brian";
      dataDir = "/home/brian/Sync";
      configDir = "/home/brian/.config/syncthing";
    };

    ipfs = {
      enable = true;
    };

    fail2ban = {
      enable = true;
    };
  };


  services.openssh.enable = true;
  services.openssh.passwordAuthentication = false;
  services.openssh.permitRootLogin = "no";
}