86 lines
2.1 KiB
Nix
86 lines
2.1 KiB
Nix
|
{
|
||
|
|
repoFlake,
|
||
|
|
pkgs,
|
||
|
|
lib,
|
||
|
|
config,
|
||
|
|
nodeFlake,
|
||
|
|
nodeName,
|
||
|
|
localDomainName,
|
||
|
|
system,
|
||
|
|
...
|
||
|
|
}: let
|
||
|
|
in {
|
||
|
|
imports = [
|
||
|
|
# repoFlake.inputs.sops-nix.nixosModules.sops
|
||
|
|
|
||
|
|
# ../../profiles/common/user.nix
|
||
|
|
|
||
|
|
{
|
||
|
|
nix.nixPath = [
|
||
|
|
"nixpkgs=${pkgs.path}"
|
||
|
|
];
|
||
|
|
|
||
|
|
nix.settings.experimental-features = [
|
||
|
|
"nix-command"
|
||
|
|
"flakes"
|
||
|
|
];
|
||
|
|
|
||
|
|
nix.settings.max-jobs = lib.mkDefault "auto";
|
||
|
|
nix.settings.cores = lib.mkDefault 0;
|
||
|
|
}
|
||
|
|
|
||
|
|
{
|
||
|
|
services.openssh.enable = true;
|
||
|
|
services.openssh.settings.PermitRootLogin = "yes";
|
||
|
|
|
||
|
|
# users.commonUsers = {
|
||
|
|
# enable = true;
|
||
|
|
# enableNonRoot = false;
|
||
|
|
# rootPasswordFile = config.sops.secrets.passwords-root.path;
|
||
|
|
# };
|
||
|
|
|
||
|
|
users.users.root.password = "voodoo";
|
||
|
|
|
||
|
|
# sops.defaultSopsFile = ../../../../secrets/${nodeName}/secrets.yaml;
|
||
|
|
# sops.defaultSopsFormat = "yaml";
|
||
|
|
|
||
|
|
# sops.secrets.passwords-root.neededForUsers = true;
|
||
|
|
}
|
||
|
|
];
|
||
|
|
|
||
|
|
networking = {
|
||
|
|
hostName = nodeName;
|
||
|
|
useNetworkd = false;
|
||
|
|
useDHCP = true;
|
||
|
|
firewall.enable = false;
|
||
|
|
};
|
||
|
|
|
||
|
|
system.stateVersion = "23.11";
|
||
|
|
|
||
|
|
# We exclude a number of modules included in the default list. A non-insignificant amount do
|
||
|
|
# not apply to embedded hardware like this, so simply skip the defaults.
|
||
|
|
#
|
||
|
|
# Custom kernel is required as a lot of MTK components misbehave when built as modules.
|
||
|
|
# They fail to load properly, leaving the system without working ethernet, they'll oops on
|
||
|
|
# remove. MTK-DSA parts and PCIe were observed to do this.
|
||
|
|
|
||
|
|
# boot.initrd.includeDefaultModules = false;
|
||
|
|
# boot.initrd.kernelModules = ["rfkill" "cfg80211" "mt7915e"];
|
||
|
|
# boot.initrd.availableKernelModules = ["nvme"];
|
||
|
|
|
||
|
|
hardware.enableRedistributableFirmware = false;
|
||
|
|
|
||
|
|
# Extlinux compatible with custom uboot patches in this repo, which also provide unique
|
||
|
|
# MAC addresses instead of the non-unique one that gets used by a lot of MTK devices...
|
||
|
|
boot.loader.grub.enable = true;
|
||
|
|
|
||
|
|
environment.systemPackages = [
|
||
|
|
# pkgs.pciutils
|
||
|
|
];
|
||
|
|
|
||
|
|
fileSystems."/".label = "voodoo_root";
|
||
|
|
boot.loader.grub.devices = [
|
||
|
|
"/dev/disk/by-id/usb-ST313640_A_20171021-0"
|
||
|
|
];
|
||
|
|
}
|