services-main.nix

{pkgs, config, ...}:
{
    httpd = import /home/raskin/src/nix/configurations/misc/raskin/httpd.nix {inherit pkgs config;};
    bind = import  /home/raskin/src/nix/configurations/misc/raskin/bind.nix {inherit pkgs config;};

    openssh = {
      enable = true;
      extraConfig = ''
        VersionAddendum raskin.401a0bf1.ignorelist.com
      '';
    };


    ntp = {
	# Not a good idea unless you sync however else.
	# But I keep my clock ahead by 7 minutes.
      enable = false;															
    };
    samba = {
      enable = true;
      extraConfig = ''
      '';
    };
    gogoclient = {
      enable = true;

	# I failed to make tunnel really reliable with
	# double NAT, so I just have a script to control 
	# it. Works in some other places, though.
      autorun = false;																
      
      username = (import /root/nix-sysconfig/gw6c.nix).asus_ux32ln_aarnet.username;
      password = "/root/nix-sysconfig/gw6c.raskin-asus-ux32ln.pass";
      server   = (import /root/nix-sysconfig/gw6c.nix).asus_ux32ln_aarnet.server;
    };
    postgresql = (import ./postgresql.nix) {inherit pkgs;};
    mysql = {
      enable=true;
      package = pkgs.mysql55;
    };
    udev = {
    };
    locate = {
      enable = true;
    };
    ejabberd = {
      enable = true;
      virtualHosts = "\"localhost\", \"401a0bf1.ignorelist.com\"";
    };
    vsftpd = {
      enable = true;
      anonymousUser = true;
      anonymousUserHome = "/home/ftp/";
      writeEnable = true;
      anonymousMkdirEnable = true;
      anonymousUploadEnable = true;
      anonymousUmask = "0002";
      #rsaCertFile="/var/certs/www/host.cert";
      #sslEnable = false;
    };
    printing = {
      enable = true;
      drivers = [pkgs.foo2zjs pkgs.foomatic_filters 
		];
    };
    mingetty = {
      helpLine = ''
      0123456789 !@#$%^&*() -=\_+|
      abcdefghijklmnopqrstuvwxyz
      ABCDEFGHIJKLMNOPQRSTUVWXYZ
      []{};:'",./<>?~`
      '';
    };
    gpm = {
      enable = true;
    };
    postfix = {
      enable = true;
      domain = "${config.networking.hostName}.${config.networking.domain}";
      sslCert = /var/certs/smtp/postfix.pem;
      sslCACert = /var/certs/ca-cert.pem;
      sslKey = /var/certs/smtp/postfix.key;
      recipientDelimiter = "+";
    };

    cron = {
      systemCronJobs = [
#	in UTC
	"34 1 * * * root ( [ -e /dev/sdb5 ] && ! [ -d /media/sdb5 ] && pmount /dev/sdb5 && ([ -f /media/sdb5/backup/auto-backup-here ] && /root/script/backup_notebook /media/sdb5/backup ; ) ; sync && pumount /dev/sdb5 ) &> /var/log/sdb5-backup.log "
	"29 1 * * * root ( [ -e /dev/sdb1 ] && ! [ -d /media/sdb1 ] && pmount /dev/sdb1 && ([ -f /media/sdb1/backup/auto-backup-here ] && /root/script/backup_notebook /media/sdb1/backup ; ) ; sync && pumount /dev/sdb1 ) &> /var/log/sdb1-backup.log "
	"44 1 * * * root ( [ -e /dev/sdc5 ] && ! [ -d /media/sdc5 ] && pmount /dev/sdc5 && ([ -f /media/sdc5/backup/auto-backup-here ] && /root/script/backup_notebook /media/sdc5/backup ; ) ; sync && pumount /dev/sdc5 ) &> /var/log/sdc5-backup.log "
	"39 1 * * * root ( [ -e /dev/sdc1 ] && ! [ -d /media/sdc1 ] && pmount /dev/sdc1 && ([ -f /media/sdc1/backup/auto-backup-here ] && /root/script/backup_notebook /media/sdc1/backup ; ) ; sync && pumount /dev/sdc1 ) &> /var/log/sdc1-backup.log "
#	"14 1 * * * root sh -c 'PATH=$PATH:/root/script/; ensure-nas-backup-mount ; mount; ls /tmp/backup/backup ; [ -f /tmp/backup/backup/auto-backup-here ] ; echo $? ; ([ -f /tmp/backup/backup/auto-backup-here ] && /root/script/backup_notebook /tmp/backup/backup ; sync ) && umount /tmp/backup' &> /var/log/nas-backup.log"
	"5-59/30 * * * * root cd /root && nice -n 10 ionice -c 3 /home/raskin/src/sh/script/mtn-pending-changes > /root/.mtn-pending-changes-new ; mv /root/.mtn-pending-changes-new /root/.mtn-pending-changes "
	"0-59/30 * * * * raskin export PATH=$PATH:/home/raskin/src/sh/script ; cd /home/raskin && nice -n 10 ionice -c 3 mtn-pending-changes > /home/raskin/.mtn-pending-changes-new ; mv /home/raskin/.mtn-pending-changes-new /home/raskin/.mtn-pending-changes ; cd rc && kill-gajim-passwords && purge-from-pending"
	"30 2 * * * root /var/run/current-system/sw/bin/nix-instantiate /home/raskin/.nix-personal/personal.nix"
      ];
    };
    
    atd = {
      allowEveryone = true;
    };

    nixosManual.enable = false;

    avahi = {
      enable = true;
      hostName = "401a0bf1";
    };

    nfs = {
      server = {
        enable = true;
	exports = ''
	  /var/nfs *(ro,insecure,all_squash)
	'';
      };
    };

    logind.extraConfig=''
      HandleLidSwitch=ignore
      HandlePowerKey=ignore
      HandleSuspendKey=ignore
      HandleHibernateKey=ignore
      HandlePowerKey=ignore
    '';

    nscd.enable = false;
}