106 lines
1.9 KiB
Nix
106 lines
1.9 KiB
Nix
{ repoFlake
|
|
, nodeFlake
|
|
, pkgs
|
|
, lib
|
|
, config
|
|
, nodeName
|
|
, localDomainName
|
|
, system
|
|
, ...
|
|
}:
|
|
|
|
{
|
|
imports = [
|
|
repoFlake.inputs.sops-nix.nixosModules.sops
|
|
nodeFlake.inputs.disko.nixosModules.disko
|
|
./disko.nix
|
|
|
|
../../profiles/common/user.nix
|
|
../../profiles/common/pkg.nix
|
|
|
|
|
|
{
|
|
# nixpkgs.config.allowUnsupportedSystem = true;
|
|
|
|
# flake registry
|
|
nix.registry.nixpkgs.flake = nodeFlake.inputs.nixpkgs;
|
|
|
|
nix.nixPath = [
|
|
"nixpkgs=${pkgs.path}"
|
|
];
|
|
|
|
nix.settings.experimental-features = [
|
|
"nix-command"
|
|
"flakes"
|
|
];
|
|
|
|
nix.settings.max-jobs = lib.mkDefault "auto";
|
|
}
|
|
|
|
{
|
|
services.openssh.enable = true;
|
|
services.openssh.settings.PermitRootLogin = "yes";
|
|
services.openssh.openFirewall = true;
|
|
|
|
users.commonUsers = {
|
|
enable = true;
|
|
enableNonRoot = true;
|
|
};
|
|
|
|
sops.defaultSopsFile = ../../../../secrets/${nodeName}/secrets.yaml;
|
|
sops.defaultSopsFormat = "yaml";
|
|
}
|
|
|
|
nodeFlake.inputs.home-manager.nixosModules.home-manager
|
|
|
|
../../snippets/sway-desktop.nix
|
|
../../snippets/radicale.nix
|
|
];
|
|
|
|
hardware.thinkpad-x13s = {
|
|
enable = true;
|
|
|
|
# TODO: use hardware address
|
|
bluetoothMac = "65:9e:7a:8b:86:28";
|
|
};
|
|
|
|
networking = {
|
|
hostName = nodeName;
|
|
|
|
firewall.enable = true;
|
|
|
|
# useNetworkd = true;
|
|
networkmanager.enable = true;
|
|
};
|
|
|
|
system.stateVersion = "23.11";
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
environment.systemPackages = [
|
|
pkgs.sshfs
|
|
pkgs.util-linux
|
|
pkgs.coreutils
|
|
pkgs.vim
|
|
|
|
pkgs.git
|
|
pkgs.git-crypt
|
|
];
|
|
|
|
home-manager.users.steveej = _: {
|
|
imports = [
|
|
../../../home-manager/configuration/graphical-fullblown.nix
|
|
|
|
(_: {
|
|
programs.chromium.extensions = [
|
|
# can define host-specific extensions here
|
|
];
|
|
})
|
|
];
|
|
|
|
home.sessionVariables = { };
|
|
|
|
home.packages = with pkgs; [
|
|
];
|
|
};
|
|
}
|