166 lines
3.3 KiB
Nix
166 lines
3.3 KiB
Nix
{
|
|
modulesPath,
|
|
repoFlake,
|
|
packages',
|
|
pkgs,
|
|
lib,
|
|
config,
|
|
nodeFlake,
|
|
nodeName,
|
|
system,
|
|
...
|
|
}: {
|
|
disabledModules = [
|
|
];
|
|
|
|
imports = [
|
|
nodeFlake.inputs.disko.nixosModules.disko
|
|
nodeFlake.inputs.srvos.nixosModules.roles-nix-remote-builder
|
|
repoFlake.inputs.sops-nix.nixosModules.sops
|
|
|
|
../../profiles/common/user.nix
|
|
../../snippets/nix-settings-holo-chain.nix
|
|
|
|
# TODO
|
|
# ./network.nix
|
|
# ./monitoring.nix
|
|
|
|
# user config
|
|
{
|
|
users.commonUsers = {
|
|
enable = true;
|
|
enableNonRoot = true;
|
|
};
|
|
home-manager.users.root = import ../../../home-manager/configuration/text-minimal.nix {
|
|
inherit pkgs;
|
|
};
|
|
|
|
home-manager.users.steveej = {pkgs, ...}: {
|
|
imports = [
|
|
../../../home-manager/configuration/text-minimal.nix
|
|
];
|
|
|
|
home.packages = [
|
|
pkgs.nil
|
|
pkgs.rnix-lsp
|
|
pkgs.nixd
|
|
pkgs.nixpkgs-fmt
|
|
pkgs.alejandra
|
|
pkgs.nixfmt
|
|
];
|
|
};
|
|
|
|
programs.zsh.enable = true;
|
|
users.defaultUserShell = pkgs.zsh;
|
|
environment.pathsToLink = ["/share/zsh"];
|
|
}
|
|
];
|
|
|
|
roles.nix-remote-builder.schedulerPublicKeys = [
|
|
# TODO: make this a reference to the private key's secret
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC8FHuK0k86iBWq41+NAhVwJqH1ZpGJe+q01m7iLviz6 root@steveej-t14"
|
|
];
|
|
|
|
services.openssh.enable = true;
|
|
services.openssh.settings.PermitRootLogin = "yes";
|
|
|
|
boot = {
|
|
kernel = {
|
|
sysctl = {
|
|
"net.ipv4.conf.all.forwarding" = true;
|
|
"net.ipv6.conf.all.forwarding" = true;
|
|
};
|
|
};
|
|
};
|
|
|
|
networking = {
|
|
hostName = nodeName;
|
|
useNetworkd = true;
|
|
useDHCP = true;
|
|
|
|
# No local firewall.
|
|
nat.enable = true;
|
|
firewall.enable = false;
|
|
};
|
|
|
|
disko.devices = let
|
|
disk = id: {
|
|
type = "disk";
|
|
device = "/dev/${id}";
|
|
content = {
|
|
type = "gpt";
|
|
partitions = {
|
|
boot = {
|
|
size = "1M";
|
|
type = "EF02"; # for grub MBR
|
|
};
|
|
mdadm = {
|
|
size = "100%";
|
|
content = {
|
|
type = "mdraid";
|
|
name = "raid0";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
in {
|
|
disk = {
|
|
sda = disk "sda";
|
|
sdb = disk "sdb";
|
|
};
|
|
mdadm = {
|
|
raid0 = {
|
|
type = "mdadm";
|
|
level = 0;
|
|
content = {
|
|
type = "gpt";
|
|
partitions = {
|
|
primary = {
|
|
size = "100%";
|
|
content = {
|
|
type = "filesystem";
|
|
format = "btrfs";
|
|
mountpoint = "/";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
system.stateVersion = "23.11";
|
|
|
|
boot.kernelPackages = pkgs.linuxPackages_latest;
|
|
boot.initrd.includeDefaultModules = true;
|
|
boot.initrd.kernelModules = [
|
|
"dm-raid"
|
|
"dm-integrity"
|
|
"xhci_pci_renesas"
|
|
];
|
|
|
|
hardware.enableRedistributableFirmware = true;
|
|
|
|
environment.systemPackages = [
|
|
pkgs.hdparm
|
|
];
|
|
|
|
# home-manager.users.steveej = _: {
|
|
# imports = [
|
|
# ../../../home-manager/configuration/text-minimal.nix
|
|
# ];
|
|
|
|
# home.sessionVariables = {
|
|
# };
|
|
|
|
# home.packages = with pkgs; [
|
|
# ];
|
|
# };
|
|
|
|
virtualisation.libvirtd.enable = true;
|
|
|
|
boot.binfmt.emulatedSystems = [
|
|
"aarch64-linux"
|
|
];
|
|
}
|