SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 16:21:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

hosts/srv-public: Reinstall on new vps

Browse source
This commit is contained in:
SebastianStork 2025-10-01 00:30:19 +02:00
parent 23ebd7d422
commit 03a62ea382
4 changed files with 39 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

6
hosts/srv-public/default.nix
View file

@ -1,6 +1,6 @@
{ config, ... }: { config, ... }:
{ {
system.stateVersion = "24.11"; system.stateVersion = "25.05";
meta = { meta = {
domains.validate = true; domains.validate = true;
@ -8,9 +8,11 @@
}; };
custom = { custom = {
impermanence.enable = true;
sops = { sops = {
enable = true; enable = true;
agePublicKey = "age1g9fm9w3j2ep7qrqmq9wx09p3ynn3xm7elp36eursj2fvh6yw5q6st448jz"; agePublicKey = "age1tfgn62qe9264yzsw5svdppz57e3dhlzfcf043ecpg82mgny88gwsdxg9vz";
}; };
boot.loader.grub.enable = true; boot.loader.grub.enable = true;

44
hosts/srv-public/disko.nix
View file

@ -10,27 +10,43 @@
size = "1M"; size = "1M";
type = "EF02"; type = "EF02";
}; };
root = { ESP = {
size = "512M";
type = "EF00";
content = {
type = "filesystem";
format = "vfat";
mountpoint = "/boot";
mountOptions = [ "umask=0077" ];
};
};
nix = {
size = "20G";
content = {
type = "filesystem";
format = "ext4";
mountpoint = "/nix";
mountOptions = [ "noatime" ];
};
};
persist = {
size = "100%"; size = "100%";
content = { content = {
type = "lvm_pv"; type = "filesystem";
vg = "pool"; format = "ext4";
mountpoint = "/persist";
mountOptions = [ "noatime" ];
}; };
}; };
}; };
}; };
}; };
lvm_vg.pool = { nodev."/" = {
type = "lvm_vg"; fsType = "tmpfs";
lvs.root = { mountOptions = [
size = "100%FREE"; "defaults"
content = { "mode=755"
type = "filesystem"; ];
format = "ext4";
mountpoint = "/";
mountOptions = [ "defaults" ];
};
};
}; };
}; };
} }

4
hosts/srv-public/hardware.nix
View file

@ -26,8 +26,8 @@
linkConfig.RequiredForOnline = "routable"; linkConfig.RequiredForOnline = "routable";
networkConfig.DHCP = "no"; networkConfig.DHCP = "no";
address = [ address = [
"91.99.70.118/32" "91.107.212.241/32"
"2a01:4f8:1c1b:ffc7::1/64" "2a01:4f8:1c17:5597::1/64"
]; ];
routes = [ routes = [
{ {

6
hosts/srv-public/secrets.json
View file

@ -34,11 +34,11 @@
"age": [ "age": [
{ {
"recipient": "age1mpq8m4p7dnxh5ze3fh7etd2k6sp85zdnmp9te3e9chcw4pw07pcq960zh5", "recipient": "age1mpq8m4p7dnxh5ze3fh7etd2k6sp85zdnmp9te3e9chcw4pw07pcq960zh5",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTOEl3dWhrVHI0cHlUMjB3\nYzFFd0xyZUtnTTM4UGRsWTE5eDl5TVJEeVd3CklvNldORkZ0bURLT1UvdWQxc2Er\nbkl5ZHZ1aTZGK1kzZE1ac0pTLy90TDgKLS0tIDNDb0FWcU1LT3NXRW9rdEcxRm9Y\nTEdmMVJYSVdPQ2oxVnR5aVJxVTROTFkKMYZ+gH9w1F/gmOtP/pQJ5dVc0SXu08Uz\n4kqYnyM2URWNqT0quHybKRu1421LKXfU2N/ImVZptz9SRtCDaRK1YA==\n-----END AGE ENCRYPTED FILE-----\n" "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwbXkzdUdQQUZML09QbGlU\nZEUvUmVSQ0Y0SFRkZ054Wk9ITXpQblFTOVNNCktNVFAyOFVPNTNQdEc5eEtjK3J4\nM25JWHNiT3JQb2pwUXFjNk5jbDBxOVEKLS0tIEsxM2J1OGVXME9xOU93clRBalFu\na3JhU3I5ZXZBVWxyUTdmWkxBdmlyNTQK+0N88y3r45jjxjC+4eT9+BnIPZgtVyBd\ngNYOKPxoa+KoKk66TSMoVcFJzyVgmLBKeomyNKw/D0gz/ZTU7J9Hag==\n-----END AGE ENCRYPTED FILE-----\n"
}, },
{ {
"recipient": "age1g9fm9w3j2ep7qrqmq9wx09p3ynn3xm7elp36eursj2fvh6yw5q6st448jz", "recipient": "age1tfgn62qe9264yzsw5svdppz57e3dhlzfcf043ecpg82mgny88gwsdxg9vz",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4OGcxUHFrNW5PMlZVL0hF\naUtvZzRZTEs0SjRUKythaTB6WUdOODJKODI4ClNuVjVqdGlSMTdGSW9GMCtpbUxn\ncnZvckxkWDBNV3hQQnpnZ0xkeWJ1K0EKLS0tIDBGdTZINTVoeFNMQmpsZVg5S2xv\nbXF5M0FJOCs3b1dqcGF6bXJsd3dyc2sKIpq/yiNubX/yMt/Kj7TYThm3/Kj6we+X\ngvijkVVdddCyO0TH2GZQM5rIQvSq299GwcECDHh7QSUVhEAerJA3qw==\n-----END AGE ENCRYPTED FILE-----\n" "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUERmY3A4Z2pGclBmdEtB\neGV5dVk3TTJKclc3YlFlNUFJbEVKZ3Ric1J3CktiWUlsUlNrV2g4UGRjREljM254\nV3RjSjNLOWw1V0hUa0RES01POUphK28KLS0tIDVpdmZmMmgvYmhGamV2QjNLK0Rk\nbDd3N3M3UHo3Qnc1dy9BdW4rRWlFbU0KUSJmiNwH31TGNatEAc5Wpzalnm4f8YeY\nNyA1k2/QJzhYYFm5KBEGo9TLpJJ59IjInW2MCGuBeFh4Xzi+HiNxfA==\n-----END AGE ENCRYPTED FILE-----\n"
} }
], ],
"lastmodified": "2025-09-22T19:09:21Z", "lastmodified": "2025-09-22T19:09:21Z",