who even knows
This commit is contained in:
parent
d2b7eefd89
commit
470b9379f5
13 changed files with 523 additions and 248 deletions
|
|
@ -13,6 +13,7 @@
|
|||
"wheel"
|
||||
"plugdev"
|
||||
"video"
|
||||
"adbusers"
|
||||
];
|
||||
};
|
||||
environment.systemPackages = with pkgs; [vim];
|
||||
|
|
|
|||
|
|
@ -1,7 +1,6 @@
|
|||
{
|
||||
inputs,
|
||||
pkgs,
|
||||
pkgs-stable,
|
||||
attrs,
|
||||
system,
|
||||
...
|
||||
|
|
@ -12,8 +11,9 @@
|
|||
];
|
||||
in {
|
||||
t14 = inputs.nixpkgs.lib.nixosSystem {
|
||||
inherit pkgs;
|
||||
specialArgs = {
|
||||
inherit inputs system pkgs attrs;
|
||||
inherit inputs system attrs;
|
||||
host = {
|
||||
hostName = "t14";
|
||||
inherit (attrs) username;
|
||||
|
|
@ -28,8 +28,9 @@ in {
|
|||
];
|
||||
};
|
||||
consensus = inputs.nixpkgs.lib.nixosSystem {
|
||||
inherit pkgs;
|
||||
specialArgs = {
|
||||
inherit inputs system pkgs attrs;
|
||||
inherit inputs system attrs;
|
||||
host = {
|
||||
hostName = "consensus";
|
||||
inherit (attrs) username;
|
||||
|
|
@ -42,20 +43,4 @@ in {
|
|||
./consensus/configuration.nix
|
||||
];
|
||||
};
|
||||
nc = inputs.nixpkgs-stable.lib.nixosSystem {
|
||||
specialArgs = {
|
||||
pkgs = pkgs-stable;
|
||||
inherit inputs system attrs;
|
||||
host = {
|
||||
hostName = "nc";
|
||||
inherit (attrs) username;
|
||||
};
|
||||
};
|
||||
modules =
|
||||
defaultModules
|
||||
++ [
|
||||
./configuration.nix
|
||||
./nc/configuration.nix
|
||||
];
|
||||
};
|
||||
}
|
||||
|
|
|
|||
|
|
@ -1,88 +0,0 @@
|
|||
{pkgs, ...}: {
|
||||
imports = [
|
||||
./hardware-configuration.nix
|
||||
./k3s.nix
|
||||
];
|
||||
environment.systemPackages = with pkgs; [
|
||||
vim
|
||||
git
|
||||
docker-compose
|
||||
];
|
||||
programs.nix-index.enableBashIntegration = false;
|
||||
programs.nix-index.enableZshIntegration = false;
|
||||
programs.nix-index-database.comma.enable = true;
|
||||
time.timeZone = "America/Chicago";
|
||||
|
||||
virtualisation.docker = {
|
||||
enable = true;
|
||||
daemon.settings = {
|
||||
data-root = "/eth2/docker";
|
||||
};
|
||||
};
|
||||
# Enable flakes and unfree packages
|
||||
nix.settings = {
|
||||
auto-optimise-store = true;
|
||||
substituters = ["https://cache.nixos.org"];
|
||||
experimental-features = ["nix-command" "flakes"];
|
||||
};
|
||||
nix.gc = {
|
||||
automatic = true;
|
||||
dates = "00:00";
|
||||
options = "--delete-older-than 14d";
|
||||
};
|
||||
networking = {
|
||||
firewall = {
|
||||
enable = true;
|
||||
allowedTCPPorts = [
|
||||
22
|
||||
9000 #charon holesky
|
||||
30001 #mainnet
|
||||
30303 #mainnet
|
||||
30304 #charon holesky
|
||||
];
|
||||
logRefusedConnections = true;
|
||||
};
|
||||
};
|
||||
services = {
|
||||
tailscale.enable = true;
|
||||
openssh = {
|
||||
enable = true;
|
||||
settings = {
|
||||
PasswordAuthentication = false;
|
||||
PermitRootLogin = "prohibit-password";
|
||||
};
|
||||
};
|
||||
fail2ban.enable = true;
|
||||
};
|
||||
users.users = {
|
||||
root = {
|
||||
openssh.authorizedKeys.keys = [''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHM4Zr0PFN7QdOG2aJ+nuzRCK6caulrpY6bphA1Ppl8Y e@t14''];
|
||||
};
|
||||
e = {
|
||||
isNormalUser = true;
|
||||
extraGroups = [
|
||||
"wheel"
|
||||
"docker"
|
||||
];
|
||||
openssh.authorizedKeys.keys = [
|
||||
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHM4Zr0PFN7QdOG2aJ+nuzRCK6caulrpY6bphA1Ppl8Y e@t14''
|
||||
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAdo4PS8myKaKAdyIqSFj2VJ+oZ9DNRIp7PBz8IWKjjy''
|
||||
];
|
||||
};
|
||||
hd = {
|
||||
isNormalUser = true;
|
||||
extraGroups = [
|
||||
"wheel"
|
||||
"docker"
|
||||
];
|
||||
};
|
||||
charon = {
|
||||
isNormalUser = true;
|
||||
extraGroups = [
|
||||
"docker"
|
||||
];
|
||||
};
|
||||
};
|
||||
security.sudo.wheelNeedsPassword = false;
|
||||
system.stateVersion = "23.11";
|
||||
}
|
||||
|
|
@ -1,28 +0,0 @@
|
|||
{
|
||||
modulesPath,
|
||||
lib,
|
||||
config,
|
||||
...
|
||||
}: {
|
||||
imports = [(modulesPath + "/profiles/qemu-guest.nix")];
|
||||
boot.loader.grub.device = "/dev/vda";
|
||||
boot.initrd.availableKernelModules = ["ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi"];
|
||||
boot.initrd.kernelModules = ["nvme"];
|
||||
fileSystems."/" = {
|
||||
device = "/dev/vda3";
|
||||
fsType = "ext4";
|
||||
};
|
||||
boot = {
|
||||
kernelModules = ["kvm-intel"];
|
||||
tmp.cleanOnBoot = true;
|
||||
};
|
||||
swapDevices = [
|
||||
{
|
||||
device = "/swapfile";
|
||||
size = 8 * 1024;
|
||||
}
|
||||
];
|
||||
zramSwap.enable = false;
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
}
|
||||
|
|
@ -1,16 +0,0 @@
|
|||
{pkgs, ...}: {
|
||||
environment.systemPackages = with pkgs; [
|
||||
k3s
|
||||
];
|
||||
services.k3s = {
|
||||
enable = true;
|
||||
role = "server";
|
||||
extraFlags = toString [
|
||||
"--disable traefik"
|
||||
"--tls-san nc.tailc353f.ts.net"
|
||||
"--node-ip 100.67.112.98"
|
||||
"--advertise-address 100.67.112.98"
|
||||
"--node-external-ip 94.16.113.7"
|
||||
];
|
||||
};
|
||||
}
|
||||
|
|
@ -14,6 +14,10 @@ in {
|
|||
cryptsetup
|
||||
nfs-utils
|
||||
nerdctl
|
||||
bubblewrap
|
||||
fuse-overlayfs
|
||||
dwarfs
|
||||
wine-staging
|
||||
];
|
||||
environment.extraInit = "[[ -f ${homeManagerSessionVars} ]] && source ${homeManagerSessionVars} && echo 'x' > /tmp/test";
|
||||
|
||||
|
|
@ -59,6 +63,7 @@ in {
|
|||
startAgent = true;
|
||||
};
|
||||
steam.enable = true;
|
||||
adb.enable = true;
|
||||
};
|
||||
services = {
|
||||
resolved = {
|
||||
|
|
@ -131,10 +136,11 @@ in {
|
|||
};
|
||||
hardware.ledger.enable = true;
|
||||
services.trezord.enable = true;
|
||||
services.udisks2.enable = true; # kindle
|
||||
|
||||
# Set a sane system-wide default font
|
||||
fonts.packages = with pkgs; [
|
||||
(nerdfonts.override {fonts = ["UbuntuMono"];})
|
||||
nerd-fonts.ubuntu-mono
|
||||
spleen
|
||||
];
|
||||
fonts.fontconfig.defaultFonts.monospace = ["UbuntuMono"];
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue