Initial commit
This commit is contained in:
Ghostfox
107
systems/kurin/configuration.nix
Normal file
107
systems/kurin/configuration.nix
Normal file
@@ -0,0 +1,107 @@
|
||||
{ config, pkgs, lib, inputs, ... }:
|
||||
{
|
||||
imports =
|
||||
[
|
||||
../../modules/base
|
||||
../../modules/development
|
||||
../../modules/server
|
||||
./hardware-configuration.nix
|
||||
];
|
||||
|
||||
networking.hostName = "kurin";
|
||||
|
||||
# hardware.raspberry-pi."4" = {
|
||||
# dwc2.enable = true;
|
||||
# };
|
||||
|
||||
# Secrets
|
||||
imports = [
|
||||
inputs.sops-nix.nixosModules.sops
|
||||
];
|
||||
|
||||
sops = {
|
||||
defaultSopsFile = ../../secrets/kurin.yaml;
|
||||
defaultSopsFormat = "yaml";
|
||||
};
|
||||
|
||||
sops.secrets."users_dark_password".neededForUsers = true;
|
||||
users.users.dark.hashedPasswordFile = config.sops.secrets."users_dark_password".path;
|
||||
|
||||
|
||||
## SSH Host Key
|
||||
#services.openssh.hostKeys = [{
|
||||
# path = config.sops.secrets.host_private_key.path;
|
||||
# type = "ed25519";
|
||||
#}];
|
||||
#sops.secrets.host_private_key.restartUnits = ["sshd.service"];
|
||||
# boot.initrd.secrets = {
|
||||
# "/etc/dropbear/ssh_host_key" = lib.mkForce config.sops.secrets.host_private_key.path;
|
||||
# };
|
||||
|
||||
# NFS support
|
||||
# boot.supportedFilesystems = {
|
||||
# nfs = true;
|
||||
# };
|
||||
# environment.systemPackages = with pkgs; [
|
||||
# nfs-utils
|
||||
# ];
|
||||
|
||||
|
||||
fileSystems."/boot/firmware".options = lib.mkForce [ "nofail" ];
|
||||
#fileSystems."/".fsType = lib.mkForce "btrfs";
|
||||
#fileSystems."/".options = lib.mkForce [ "compress=lz0" ];
|
||||
|
||||
sdImage = {
|
||||
compressImage = false;
|
||||
firmwarePartitionName = "boot";
|
||||
firmwareSize = 256;
|
||||
};
|
||||
|
||||
# fileSystems."/containers" = {
|
||||
# mountPoint = "/containers";
|
||||
# device = "192.168.10.108:/i-data/3c7fc725/nfs/compose";
|
||||
# fsType = "nfs";
|
||||
# options = [ "vers=3" "soft" "intr" "nolock" "acl" "ac" ];
|
||||
# };
|
||||
|
||||
#systemd.mounts.containers = {
|
||||
# requires = [ "network-online.target" ];
|
||||
#};
|
||||
|
||||
# systemd.services.docker = {
|
||||
# after = [ "containers.mount" ];
|
||||
# requires = [ "containers.mount" ];
|
||||
# wantedBy = lib.mkForce [];
|
||||
# };
|
||||
|
||||
# systemd.sockets.docker.upheldBy = [ "containers.mount" ];
|
||||
|
||||
#fileSystems."/var/lib/docker" = {
|
||||
# mountPoint = "/var/lib/docker";
|
||||
#fsType = "glusterfs";
|
||||
#device = "sircu.pi:kurin-docker";
|
||||
#fsType = "nfs";
|
||||
#device = "192.168.10.108:/kurin-docker";
|
||||
#options = [ "nfsvers=4.0" ];
|
||||
#};
|
||||
|
||||
#zramSwap = {
|
||||
# enable = true;
|
||||
# algorithm = "zstd";
|
||||
# memoryPercent = 40;
|
||||
#};
|
||||
|
||||
networking.wireless = {
|
||||
enable = true;
|
||||
networks = {
|
||||
"Sinox" = {
|
||||
pskRaw = "ext:Sinox";
|
||||
};
|
||||
};
|
||||
scanOnLowSignal = false;
|
||||
secretsFile = config.sops.secrets."wireless_passwords".path;
|
||||
userControlled = true;
|
||||
};
|
||||
|
||||
system.stateVersion = "25.11";
|
||||
}
|
||||
118
systems/saturn/configuration.nix
Normal file
118
systems/saturn/configuration.nix
Normal file
@@ -0,0 +1,118 @@
|
||||
# Edit this configuration file to define what should be installed on
|
||||
# your system. Help is available in the configuration.nix(5) man page, on
|
||||
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
|
||||
|
||||
{ config, lib, pkgs, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[
|
||||
../../modules/base
|
||||
../../modules/desktop
|
||||
../../modules/development
|
||||
../../modules/gaming
|
||||
../../modules/school
|
||||
../../modules/server
|
||||
./hardware-configuration.nix
|
||||
];
|
||||
|
||||
nixpkgs.config.rocmSupport = true;
|
||||
|
||||
virtualisation.docker.storageDriver = "btrfs";
|
||||
|
||||
# Use the systemd-boot EFI boot loader.
|
||||
boot.loader.systemd-boot.enable = true;
|
||||
boot.loader.efi.canTouchEfiVariables = true;
|
||||
boot.loader.efi.efiSysMountPoint = "/boot/efi";
|
||||
|
||||
networking.hostName = "saturn"; # Define your hostname.
|
||||
|
||||
# Configure network connections interactively with nmcli or nmtui.
|
||||
networking.networkmanager.enable = true;
|
||||
|
||||
# Set your time zone.
|
||||
|
||||
# Configure network proxy if necessary
|
||||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||||
|
||||
# Select internationalisation properties.
|
||||
# i18n.defaultLocale = "en_US.UTF-8";
|
||||
# console = {
|
||||
# font = "Lat2-Terminus16";
|
||||
# keyMap = "us";
|
||||
# useXkbConfig = true; # use xkb.options in tty.
|
||||
# };
|
||||
|
||||
# Enable the X11 windowing system.
|
||||
# services.xserver.enable = true;
|
||||
|
||||
|
||||
|
||||
|
||||
# Configure keymap in X11
|
||||
# services.xserver.xkb.layout = "us";
|
||||
# services.xserver.xkb.options = "eurosign:e,caps:escape";
|
||||
|
||||
# Enable CUPS to print documents.
|
||||
# services.printing.enable = true;
|
||||
|
||||
# Enable sound.
|
||||
# services.pulseaudio.enable = true;
|
||||
# OR
|
||||
services.pipewire = {
|
||||
enable = true;
|
||||
pulse.enable = true;
|
||||
};
|
||||
|
||||
# Enable touchpad support (enabled default in most desktopManager).
|
||||
services.libinput.enable = true;
|
||||
|
||||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||||
users.users.dark = {
|
||||
isNormalUser = true;
|
||||
extraGroups = [
|
||||
"wheel"
|
||||
"networkmanager"
|
||||
"video"
|
||||
]; # Enable ‘sudo’ for the user.
|
||||
packages = with pkgs; [
|
||||
];
|
||||
};
|
||||
|
||||
services.displayManager.plasma-login-manager.enable = true;
|
||||
services.desktopManager.plasma6.enable = true;
|
||||
|
||||
# programs.vscode.enable = true;
|
||||
# programs.firefox.enable = true;
|
||||
|
||||
# List packages installed in system profile.
|
||||
# You can use https://search.nixos.org/ to find more packages (and options).
|
||||
environment.systemPackages = with pkgs; [
|
||||
vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
|
||||
wget
|
||||
];
|
||||
|
||||
# Some programs need SUID wrappers, can be configured further or are
|
||||
# started in user sessions.
|
||||
# programs.mtr.enable = true;
|
||||
# programs.gnupg.agent = {
|
||||
# enable = true;
|
||||
# enableSSHSupport = true;
|
||||
# };
|
||||
|
||||
# List services that you want to enable:
|
||||
|
||||
# # Enable the OpenSSH daemon.
|
||||
# services.openssh.enable = true;
|
||||
|
||||
# Open ports in the firewall.
|
||||
# networking.firewall.allowedTCPPorts = [ ... ];
|
||||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||||
# Or disable the firewall altogether.
|
||||
networking.firewall.enable = false;
|
||||
|
||||
system.stateVersion = "25.11"; # Did you read the comment?
|
||||
|
||||
}
|
||||
|
||||
33
systems/saturn/hardware-configuration.nix
Normal file
33
systems/saturn/hardware-configuration.nix
Normal file
@@ -0,0 +1,33 @@
|
||||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||
# and may be overwritten by future invocations. Please make changes
|
||||
# to /etc/nixos/configuration.nix instead.
|
||||
{ config, lib, pkgs, modulesPath, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[ (modulesPath + "/installer/scan/not-detected.nix")
|
||||
];
|
||||
|
||||
boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "usb_storage" "sd_mod" ];
|
||||
boot.initrd.kernelModules = [ ];
|
||||
boot.kernelModules = [ "kvm-amd" ];
|
||||
boot.extraModulePackages = [ ];
|
||||
|
||||
fileSystems."/" =
|
||||
{ device = "/dev/disk/by-uuid/69ebc0dd-4180-4ea1-8128-9e4bf5ef1bb7";
|
||||
fsType = "btrfs";
|
||||
};
|
||||
|
||||
fileSystems."/boot/efi" =
|
||||
{ device = "/dev/disk/by-uuid/4264-73CA";
|
||||
fsType = "vfat";
|
||||
options = [ "fmask=0022" "dmask=0022" ];
|
||||
};
|
||||
|
||||
swapDevices =
|
||||
[ { device = "/dev/disk/by-uuid/fd3ababc-4fe6-4db9-a259-ab83b6f1aa1d"; }
|
||||
];
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
}
|
||||
Reference in New Issue
Block a user