nix-config/hosts/cirrostratus/default.nix

126 lines
3.7 KiB
Nix
Raw Normal View History

2024-08-02 00:29:25 +02:00
{
inputs,
configLib,
...
}:
# Kapr site server.
inputs.nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
specialArgs = {inherit inputs configLib;};
# > Our main nixos configuration file <
modules = [
inputs.home-manager.nixosModules.home-manager
inputs.disko.nixosModules.disko
./disk-config.nix
2024-08-03 23:48:50 +02:00
./hardware-configuration.nix
2024-08-07 22:24:17 +02:00
./nginx.nix
./restic.nix
2024-08-02 00:29:25 +02:00
../../configs/nixos/common.nix
../../configs/nixos/tailscale.nix
../../configs/nixos/sshd.nix
2024-08-07 05:49:32 +02:00
../../configs/nixos/secrets.nix
2024-09-04 05:51:02 +02:00
../../configs/nixos/jellyfin.nix
../../configs/nixos/syncthing.nix
2024-10-18 22:54:20 +02:00
../../configs/nixos/grocy.nix
2024-10-19 22:08:48 +02:00
../../configs/nixos/factorio-docker.nix
2024-08-02 00:29:25 +02:00
({
config,
pkgs,
configLib,
2024-08-07 05:49:32 +02:00
lib,
2024-08-02 00:29:25 +02:00
...
}: {
host = {
user = "gabe";
fullName = "Gabe Venberg";
gui.enable = false;
};
2024-08-07 22:24:17 +02:00
boot.zfs.extraPools = ["storage"];
2024-08-02 00:29:25 +02:00
networking.hostName = "cirrostratus"; # Define your hostname.
networking.hostId = "1b9da0b9";
networking.useNetworkd = true;
systemd.network = {
enable = true;
2024-08-03 23:48:50 +02:00
networks."eno1" = {
name = "eno1";
DHCP = "yes";
2024-08-03 23:48:50 +02:00
# address = ["10.10.10.30/24"];
# gateway = ["10.10.10.1"];
# dns = ["1.1.1.1"];
2024-08-02 00:29:25 +02:00
};
};
2024-10-19 22:08:48 +02:00
time.timeZone = "America/Chicago";
2024-08-02 00:29:25 +02:00
2024-08-07 05:49:32 +02:00
services.duckdns = lib.mkIf (lib.hasAttrByPath ["sops" "secrets" "duckdns-token"] config) {
enable = true;
domains = ["venberg"];
tokenFile = config.sops.secrets.duckdns-token.path;
};
sops = lib.mkIf (inputs ? nix-secrets) {
secrets = {
duckdns-token.sopsFile = "${inputs.nix-secrets}/duckdns.yaml";
2024-08-07 22:24:17 +02:00
gabevenberg-draft-credentials = {
sopsFile = "${inputs.nix-secrets}/draft.gabevenberg.com";
format = "binary";
owner = config.services.nginx.user;
};
2024-08-07 05:49:32 +02:00
};
};
services.tailscale.useRoutingFeatures = "server";
2024-10-19 22:08:48 +02:00
# virtualisation.docker.daemon.settings.data-root="/storage/docker";
2024-08-02 00:29:25 +02:00
home-manager.users.${config.host.user} = {
inputs,
osConfig,
lib,
...
}: {
host = osConfig.host;
user = {
2024-08-07 05:49:32 +02:00
nvim.enable-lsp = false;
2024-08-02 00:29:25 +02:00
git = {
profile = {
name = config.host.fullName;
email = "gabevenberg@gmail.com";
};
workProfile.enable = false;
};
};
imports = [
2024-08-07 05:21:41 +02:00
../../roles/home-manager/terminal.nix
2024-08-02 00:29:25 +02:00
../../configs/home-manager/common.nix
inputs.nixvim.homeManagerModules.nixvim
];
};
2024-08-03 23:48:50 +02:00
boot = {
# Bootloader.
# loader.grub.enable = true;
loader.systemd-boot.enable = true;
loader.efi.canTouchEfiVariables = true;
supportedFilesystems.zfs = true;
initrd.supportedFilesystems.zfs = true;
};
2024-08-02 00:29:25 +02:00
2024-08-20 00:35:28 +02:00
hardware.amdgpu.initrd.enable = true;
2024-09-04 05:51:02 +02:00
hardware.graphics.enable = true;
2024-08-20 00:35:28 +02:00
2024-08-02 00:29:25 +02:00
# Open ports in the firewall.
# networking.firewall.allowedTCPPorts = [ ... ];
# networking.firewall.allowedUDPPorts = [ ... ];
# Or disable the firewall altogether.
# networking.firewall.enable = false;
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. Its perfectly fine and recommended to leave
# this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
system.stateVersion = "24.05"; # Did you read the comment?
})
];
}