mirror of
https://github.com/SebastianStork/nixos-config.git
synced 2026-01-21 14:01:34 +01:00
Rename hosts for clarity
This commit is contained in:
parent
d99844df8f
commit
fc386b98dd
24 changed files with 0 additions and 0 deletions
45
hosts/desktop/default.nix
Normal file
45
hosts/desktop/default.nix
Normal file
|
|
@ -0,0 +1,45 @@
|
|||
{ pkgs, ... }:
|
||||
{
|
||||
system.stateVersion = "23.11";
|
||||
boot.kernelPackages = pkgs.linuxPackages_latest;
|
||||
|
||||
custom = {
|
||||
sops = {
|
||||
enable = true;
|
||||
agePublicKey = "age18x6herevmcuhcmeh47ll6p9ck9zk4ga6gfxwlc8yl49rwjxm7qusylwfgc";
|
||||
};
|
||||
boot = {
|
||||
loader.systemd-boot.enable = true;
|
||||
silent = true;
|
||||
};
|
||||
users.seb = {
|
||||
enable = true;
|
||||
zsh.enable = true;
|
||||
homeManager.enable = true;
|
||||
};
|
||||
|
||||
dm.tuigreet = {
|
||||
enable = true;
|
||||
autoLogin = true;
|
||||
};
|
||||
de.hyprland.enable = true;
|
||||
|
||||
sound.enable = true;
|
||||
|
||||
services = {
|
||||
resolved.enable = true;
|
||||
gc.enable = true;
|
||||
geoclue.enable = true;
|
||||
tailscale = {
|
||||
enable = true;
|
||||
ssh.enable = true;
|
||||
};
|
||||
syncthing = {
|
||||
enable = true;
|
||||
deviceId = "FAJS5WM-UAWGW2U-FXCGPSP-VAUOTGM-XUKSEES-D66PMCJ-WBODJLV-XTNCRA7";
|
||||
};
|
||||
};
|
||||
|
||||
programs.steam.enable = true;
|
||||
};
|
||||
}
|
||||
63
hosts/desktop/disko.nix
Normal file
63
hosts/desktop/disko.nix
Normal file
|
|
@ -0,0 +1,63 @@
|
|||
{
|
||||
disko.devices = {
|
||||
disk.main = {
|
||||
type = "disk";
|
||||
device = "/dev/nvme0n1";
|
||||
content = {
|
||||
type = "gpt";
|
||||
partitions = {
|
||||
ESP = {
|
||||
type = "EF00";
|
||||
size = "512M";
|
||||
content = {
|
||||
type = "filesystem";
|
||||
format = "vfat";
|
||||
mountpoint = "/boot";
|
||||
mountOptions = [ "defaults" ];
|
||||
};
|
||||
};
|
||||
luks = {
|
||||
size = "100%";
|
||||
content = {
|
||||
name = "cryptroot";
|
||||
type = "luks";
|
||||
settings = {
|
||||
allowDiscards = true;
|
||||
bypassWorkqueues = true;
|
||||
keyFile = "/dev/disk/by-id/usb-SCSI_DISK-0:0";
|
||||
keyFileSize = 512;
|
||||
keyFileTimeout = 5;
|
||||
};
|
||||
additionalKeyFiles = [ "/tmp/secret.key" ];
|
||||
content = {
|
||||
type = "lvm_pv";
|
||||
vg = "pool";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
lvm_vg.pool = {
|
||||
type = "lvm_vg";
|
||||
lvs = {
|
||||
swap = {
|
||||
size = "20G";
|
||||
content = {
|
||||
type = "swap";
|
||||
resumeDevice = true;
|
||||
};
|
||||
};
|
||||
root = {
|
||||
size = "100%FREE";
|
||||
content = {
|
||||
type = "filesystem";
|
||||
format = "ext4";
|
||||
mountpoint = "/";
|
||||
mountOptions = [ "defaults" ];
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
68
hosts/desktop/hardware.nix
Normal file
68
hosts/desktop/hardware.nix
Normal file
|
|
@ -0,0 +1,68 @@
|
|||
{ inputs, ... }:
|
||||
{
|
||||
imports = [ inputs.disko.nixosModules.default ];
|
||||
|
||||
nixpkgs.hostPlatform = "x86_64-linux";
|
||||
|
||||
hardware = {
|
||||
enableRedistributableFirmware = true;
|
||||
cpu.amd.updateMicrocode = true;
|
||||
};
|
||||
|
||||
boot = {
|
||||
kernelModules = [
|
||||
"kvm-amd"
|
||||
"k10temp"
|
||||
"nct6775"
|
||||
];
|
||||
initrd.availableKernelModules = [
|
||||
"xhci_pci"
|
||||
"ahci"
|
||||
"nvme"
|
||||
"usb_storage"
|
||||
"usbhid"
|
||||
"sd_mod"
|
||||
];
|
||||
};
|
||||
|
||||
# Disable until https://github.com/NixOS/nixpkgs/issues/368642 is resolved
|
||||
# hardware.logitech.lcd.enable = true;
|
||||
|
||||
services = {
|
||||
fstrim.enable = true;
|
||||
|
||||
# Prevent immediate wake-up from suspend caused by the logi bolt receiver
|
||||
udev.extraRules = ''
|
||||
ACTION=="add" SUBSYSTEM=="pci" ATTR{vendor}=="0x1022" ATTR{device}=="0x43ee" ATTR{power/wakeup}="disabled"
|
||||
'';
|
||||
};
|
||||
|
||||
networking.useNetworkd = true;
|
||||
systemd.network = {
|
||||
enable = true;
|
||||
networks."10-enp6s0" = {
|
||||
matchConfig.Name = "enp6s0";
|
||||
networkConfig = {
|
||||
DHCP = "ipv4";
|
||||
IPv6AcceptRA = true;
|
||||
};
|
||||
linkConfig.RequiredForOnline = "routable";
|
||||
};
|
||||
};
|
||||
|
||||
hardware.fancontrol = {
|
||||
enable = true;
|
||||
config = ''
|
||||
# pwm1=rear pwm2=cpu pwm3=front+top
|
||||
INTERVAL=2
|
||||
DEVPATH=hwmon1=devices/pci0000:00/0000:00:18.3 hwmon2=devices/platform/nct6775.656
|
||||
DEVNAME=hwmon1=k10temp hwmon2=nct6798
|
||||
FCTEMPS=hwmon2/pwm1=hwmon2/temp1_input hwmon2/pwm2=hwmon1/temp1_input hwmon2/pwm3=hwmon2/temp1_input
|
||||
FCFANS=hwmon2/pwm1=hwmon2/fan1_input hwmon2/pwm2=hwmon2/fan7_input+hwmon2/fan2_input hwmon2/pwm3=hwmon2/fan3_input
|
||||
MINTEMP=hwmon2/pwm1=35 hwmon2/pwm2=45 hwmon2/pwm3=35
|
||||
MAXTEMP=hwmon2/pwm1=100 hwmon2/pwm2=100 hwmon2/pwm3=100
|
||||
MINSTART=hwmon2/pwm1=16 hwmon2/pwm2=16 hwmon2/pwm3=16
|
||||
MINSTOP=hwmon2/pwm1=16 hwmon2/pwm2=16 hwmon2/pwm3=16
|
||||
'';
|
||||
};
|
||||
}
|
||||
26
hosts/desktop/secrets.json
Normal file
26
hosts/desktop/secrets.json
Normal file
|
|
@ -0,0 +1,26 @@
|
|||
{
|
||||
"seb-password": "ENC[AES256_GCM,data:dlItcb6M0ZBmfbFz9k1QBces/hZ4bBaRQ8zCPinvXOZSNHDE4SIQfSDQSttP1LjccuQXj5U864zJz9XuFybvQn5X4Z80VEGXZw==,iv:vORmRgBgZvdafRa8vFF4LL3fw44yZV3yNq3L8eOcQRI=,tag:Jj2QBMGZzvPx6x3NriHYvQ==,type:str]",
|
||||
"tailscale": {
|
||||
"auth-key": "ENC[AES256_GCM,data:7feIp6Zlhr9ULNwinCWfcHo552ZX4y0f/Wc4JJWzw8bAhZLNTMzXRqYqHkNacgsmBstUtGlkqcafn6RjNw==,iv:bCXH6b12hP4QsiPwgH8jeeGexuBdxvqWGPMkhYlB+oY=,tag:9kacgiepaFJ7FT3shMRSKw==,type:str]"
|
||||
},
|
||||
"syncthing": {
|
||||
"cert": "ENC[AES256_GCM,data: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,iv:72+0+hlBxKtuhjhrLD1EMlx8LcJtskxO+MCpYj7rpes=,tag:ZClFYFa9pCedk8wP9LF0Kg==,type:str]",
|
||||
"key": "ENC[AES256_GCM,data:1KiNYgkaFQvttJPOM2B9OrYbSwcmSWxHYJ/0qyAqYz5J17WvqP74BIY4t+w7PMrvSUHrmo2ml+EeuFax7CKuiVBsZUBXdnUnrnOPvdFuls0WC15oxXz+ZbHtlfkut2WaiDLDF+6fRR3Pd/VY8uDD4+IvD+jXddkCiGQsME8Wh9NQNQTS9KiW6upNpXuOS6ipX1VZKQ37o7z+7w+lgVLPaPlS/vWww1CARjYddiOMNG8YvAmhaBYjdBLTTrNOW6T2iDDHNh+Hj8V8ISYDY5U6f7J+tXRbsow/0xKdPTGoPLek0k8zqpGJjfo+c3DrAZnMLn+dVHCZVJlsTWcPaiiBC1/ZQzD5cavzGMjXY3kuyP3XV3m7L+bHn9SEfHhQZ1PB,iv:lkGS4uR0Xd7FnahXLjVc8g0PiRPxyUS6YQY3EM3B5G0=,tag:bXgBUFiQomMWgXsN1d6J5g==,type:str]"
|
||||
},
|
||||
"sops": {
|
||||
"age": [
|
||||
{
|
||||
"recipient": "age1mpq8m4p7dnxh5ze3fh7etd2k6sp85zdnmp9te3e9chcw4pw07pcq960zh5",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwRGdWb25ZR2xEWmJqbVRx\ndmFDbkdybXpOb0Z4bzRwS0hjbW1JQkU3REV3CjAzUjZZU2NNMTYwT0Vsbjc0T0t5\nYXpyL0xTSlE3OS9NSTcyU1VZZk45QlkKLS0tIGZCNXBuQUxiUWRsSEZLekJvZUcw\nbXVnMXFLR2o1L3U5eHBWYlMwYU1GZmcKZYORJIFGJmVnNtH06tHT/PY1n8uiaekG\n2RwzsdZ3srNqsYjyWevnq2C4Y0/qDp67l3Z5PJVqo4Fj8u3agJx+Iw==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age18x6herevmcuhcmeh47ll6p9ck9zk4ga6gfxwlc8yl49rwjxm7qusylwfgc",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvK2dObkIyWC9JRWphaWVm\ndHlnMjlic0IrV2dqNEFPY2xDemxrRXZVc1Q0CllYVVRTaWR5YmRBc1JYK05ISFYz\nYkVFT2NQTXJDaXREQ3B3blA2QXY2dHMKLS0tIDRBVVViREh2WVdUUGFVVitFTWJV\nbzF0cEFGM2M2UDBNd1pVVGhuMTYyMGcKubGAn3lr58t3Hfi2t3FPbDWH/b5rp4Qo\no+M+QW/cOyR5zITSDNhcJobt+iabeIM1aHWFo8Am8XzUWRch7NROMg==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
}
|
||||
],
|
||||
"lastmodified": "2025-07-20T17:37:03Z",
|
||||
"mac": "ENC[AES256_GCM,data:c+DGlnaEkut4BPm4tufLIa4sutM+7z3oMMkdO3JchrLgngqTOOo1ICD4vm+jEDEM2dahwfbZ/ceSg/j0nSzE19zwcHzBHcxIFqRPdhlLrHANkO/+Ybz3NQNKFd2J3SUdAV1WMogvFqaPqdDHjdwXR9/ICdASQsiaiwOYRbNaEYM=,iv:FR4x/sVgZ0wb24V8qYeIl9GGQ8z/9fPNbvrjYS9/XTU=,tag:eJMb73XyxPiIsgkKicN9gQ==,type:str]",
|
||||
"unencrypted_suffix": "_unencrypted",
|
||||
"version": "3.10.2"
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue