who even knows

This commit is contained in:
iofq 2025-03-13 02:56:59 -05:00
parent d2b7eefd89
commit 470b9379f5
13 changed files with 523 additions and 248 deletions

View file

@ -13,6 +13,7 @@
"wheel"
"plugdev"
"video"
"adbusers"
];
};
environment.systemPackages = with pkgs; [vim];

View file

@ -1,7 +1,6 @@
{
inputs,
pkgs,
pkgs-stable,
attrs,
system,
...
@ -12,8 +11,9 @@
];
in {
t14 = inputs.nixpkgs.lib.nixosSystem {
inherit pkgs;
specialArgs = {
inherit inputs system pkgs attrs;
inherit inputs system attrs;
host = {
hostName = "t14";
inherit (attrs) username;
@ -28,8 +28,9 @@ in {
];
};
consensus = inputs.nixpkgs.lib.nixosSystem {
inherit pkgs;
specialArgs = {
inherit inputs system pkgs attrs;
inherit inputs system attrs;
host = {
hostName = "consensus";
inherit (attrs) username;
@ -42,20 +43,4 @@ in {
./consensus/configuration.nix
];
};
nc = inputs.nixpkgs-stable.lib.nixosSystem {
specialArgs = {
pkgs = pkgs-stable;
inherit inputs system attrs;
host = {
hostName = "nc";
inherit (attrs) username;
};
};
modules =
defaultModules
++ [
./configuration.nix
./nc/configuration.nix
];
};
}

View file

@ -1,88 +0,0 @@
{pkgs, ...}: {
imports = [
./hardware-configuration.nix
./k3s.nix
];
environment.systemPackages = with pkgs; [
vim
git
docker-compose
];
programs.nix-index.enableBashIntegration = false;
programs.nix-index.enableZshIntegration = false;
programs.nix-index-database.comma.enable = true;
time.timeZone = "America/Chicago";
virtualisation.docker = {
enable = true;
daemon.settings = {
data-root = "/eth2/docker";
};
};
# Enable flakes and unfree packages
nix.settings = {
auto-optimise-store = true;
substituters = ["https://cache.nixos.org"];
experimental-features = ["nix-command" "flakes"];
};
nix.gc = {
automatic = true;
dates = "00:00";
options = "--delete-older-than 14d";
};
networking = {
firewall = {
enable = true;
allowedTCPPorts = [
22
9000 #charon holesky
30001 #mainnet
30303 #mainnet
30304 #charon holesky
];
logRefusedConnections = true;
};
};
services = {
tailscale.enable = true;
openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
PermitRootLogin = "prohibit-password";
};
};
fail2ban.enable = true;
};
users.users = {
root = {
openssh.authorizedKeys.keys = [''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHM4Zr0PFN7QdOG2aJ+nuzRCK6caulrpY6bphA1Ppl8Y e@t14''];
};
e = {
isNormalUser = true;
extraGroups = [
"wheel"
"docker"
];
openssh.authorizedKeys.keys = [
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHM4Zr0PFN7QdOG2aJ+nuzRCK6caulrpY6bphA1Ppl8Y e@t14''
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAdo4PS8myKaKAdyIqSFj2VJ+oZ9DNRIp7PBz8IWKjjy''
];
};
hd = {
isNormalUser = true;
extraGroups = [
"wheel"
"docker"
];
};
charon = {
isNormalUser = true;
extraGroups = [
"docker"
];
};
};
security.sudo.wheelNeedsPassword = false;
system.stateVersion = "23.11";
}

View file

@ -1,28 +0,0 @@
{
modulesPath,
lib,
config,
...
}: {
imports = [(modulesPath + "/profiles/qemu-guest.nix")];
boot.loader.grub.device = "/dev/vda";
boot.initrd.availableKernelModules = ["ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi"];
boot.initrd.kernelModules = ["nvme"];
fileSystems."/" = {
device = "/dev/vda3";
fsType = "ext4";
};
boot = {
kernelModules = ["kvm-intel"];
tmp.cleanOnBoot = true;
};
swapDevices = [
{
device = "/swapfile";
size = 8 * 1024;
}
];
zramSwap.enable = false;
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}

View file

@ -1,16 +0,0 @@
{pkgs, ...}: {
environment.systemPackages = with pkgs; [
k3s
];
services.k3s = {
enable = true;
role = "server";
extraFlags = toString [
"--disable traefik"
"--tls-san nc.tailc353f.ts.net"
"--node-ip 100.67.112.98"
"--advertise-address 100.67.112.98"
"--node-external-ip 94.16.113.7"
];
};
}

View file

@ -14,6 +14,10 @@ in {
cryptsetup
nfs-utils
nerdctl
bubblewrap
fuse-overlayfs
dwarfs
wine-staging
];
environment.extraInit = "[[ -f ${homeManagerSessionVars} ]] && source ${homeManagerSessionVars} && echo 'x' > /tmp/test";
@ -59,6 +63,7 @@ in {
startAgent = true;
};
steam.enable = true;
adb.enable = true;
};
services = {
resolved = {
@ -131,10 +136,11 @@ in {
};
hardware.ledger.enable = true;
services.trezord.enable = true;
services.udisks2.enable = true; # kindle
# Set a sane system-wide default font
fonts.packages = with pkgs; [
(nerdfonts.override {fonts = ["UbuntuMono"];})
nerd-fonts.ubuntu-mono
spleen
];
fonts.fontconfig.defaultFonts.monospace = ["UbuntuMono"];