commit 783d365f1894819510e34535b7ea2b44fffe7058 · dunkirk.sh/dots

+11

flake.nix

···

       143
        
                   nur.modules.nixos.default

     

       144
        
                 ];

     

       145
        
               };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       146
        
             };

     

       147
        
       

     

       148
        
             # Standalone home-manager configurations

···

       143
        
                   nur.modules.nixos.default

     

       144
        
                 ];

     

       145
        
               };

     

       146
       +
       

     

       147
       +
               prattle = nixpkgs.lib.nixosSystem {

     

       148
       +
                 specialArgs = { inherit inputs outputs; };

     

       149
       +
                 modules = [

     

       150
       +
                   inputs.disko.nixosModules.disko

     

       151
       +
                   agenix.nixosModules.default

     

       152
       +
                   unstable-overlays

     

       153
       +
                   ./machines/prattle

     

       154
       +
                   nur.modules.nixos.default

     

       155
       +
                 ];

     

       156
       +
               };

     

       157
        
             };

     

       158
        
       

     

       159
        
             # Standalone home-manager configurations

+95

machines/prattle/README.md

···

       1
       +
       # Prattle - Oracle Cloud x86_64 NixOS Server

     

       2
       +
       

     

       3
       +
       ## Overview

     

       4
       +
       This is a minimal NixOS server configuration for Oracle Cloud Infrastructure.

     

       5
       +
       

     

       6
       +
       - **Hostname**: prattle

     

       7
       +
       - **Platform**: x86_64-linux

     

       8
       +
       - **Disk**: /dev/sda (Oracle Cloud default)

     

       9
       +
       - **Services**: SSH, Tailscale

     

       10
       +
       

     

       11
       +
       ## Deployment with nixos-anywhere

     

       12
       +
       

     

       13
       +
       ### Prerequisites

     

       14
       +
       1. Oracle Cloud instance running and accessible via SSH

     

       15
       +
       2. Root SSH access or sudo access configured

     

       16
       +
       3. Your SSH public key should already be in the configuration (already set)

     

       17
       +
       4. **Important for Apple Silicon (M1/M2/M3) Macs**: 

     

       18
       +
          - The built-in macOS Linux builder only supports `aarch64-linux` (ARM)

     

       19
       +
          - Since Oracle Cloud x86_64 instances use `x86_64-linux` (Intel), you **must** use `--build-on-remote`

     

       20
       +
          - This builds the system on the target machine itself during installation

     

       21
       +
       

     

       22
       +
       ### Deploy Command

     

       23
       +
       

     

       24
       +
       From your local machine (with flake repository):

     

       25
       +
       

     

       26
       +
       ```bash

     

       27
       +
       # Deploy to Oracle Cloud instance (builds on remote machine)

     

       28
       +
       nix run github:nix-community/nixos-anywhere -- \

     

       29
       +
         --flake .#prattle \

     

       30
       +
         -i ~/.ssh/id_rsa \

     

       31
       +
         --build-on-remote \

     

       32
       +
         root@<ORACLE_INSTANCE_IP>

     

       33
       +
       ```

     

       34
       +
       

     

       35
       +
       **Note**: The `-i ~/.ssh/id_rsa` flag tells nixos-anywhere which SSH key to use during installation. Your public key (`~/.ssh/id_rsa.pub`) is already configured in the system for post-installation access.

     

       36
       +
       

     

       37
       +
       The `--build-on-remote` flag is **required** when deploying from Apple Silicon Macs to x86_64 systems.

     

       38
       +
       

     

       39
       +
       ### Post-Installation

     

       40
       +
       

     

       41
       +
       1. **SSH Key Changed**: The server's SSH host key will be different after installation. Remove old entry:

     

       42
       +
          ```bash

     

       43
       +
          ssh-keygen -R <ORACLE_INSTANCE_IP>

     

       44
       +
          ```

     

       45
       +
       

     

       46
       +
       2. **Login**: SSH into the new system:

     

       47
       +
          ```bash

     

       48
       +
          ssh kierank@<ORACLE_INSTANCE_IP>

     

       49
       +
          ```

     

       50
       +
       

     

       51
       +
       3. **Change Password** (optional, since SSH key auth is configured):

     

       52
       +
          ```bash

     

       53
       +
          passwd

     

       54
       +
          ```

     

       55
       +
       

     

       56
       +
       4. **Update the System**:

     

       57
       +
          ```bash

     

       58
       +
          cd ~/dots

     

       59
       +
          git pull

     

       60
       +
          sudo nixos-rebuild switch --flake .#prattle

     

       61
       +
          ```

     

       62
       +
       

     

       63
       +
       ## Configuration Details

     

       64
       +
       

     

       65
       +
       ### Boot Configuration

     

       66
       +
       - **Bootloader**: systemd-boot (Oracle Cloud recommended)

     

       67
       +
       - **Kernel Parameters**: `net.ifnames=0` for predictable network interface names

     

       68
       +
       - **EFI**: Enabled with variable modification support

     

       69
       +
       ### Disk Layout

     

       70
       +
       - **Boot Partition**: 500MB, EFI (vfat), mounted at `/boot`

     

       71
       +
       - **Root Partition**: Remaining space, ext4, mounted at `/`

     

       72
       +
       

     

       73
       +
       ### Network

     

       74
       +
       - DHCP configured (Oracle Cloud default)

     

       75
       +
       - Hostname: `prattle`

     

       76
       +
       - Firewall enabled

     

       77
       +
       - SSH enabled (key-based auth only)

     

       78
       +
       - Tailscale client configured

     

       79
       +
       

     

       80
       +
       ### User Configuration

     

       81
       +
       - **User**: kierank

     

       82
       +
       - **Shell**: zsh

     

       83
       +
       - **Groups**: wheel, networkmanager

     

       84
       +
       - **SSH**: Key-based authentication configured

     

       85
       +
       - **Initial Password**: "changeme" (change after first login)

     

       86
       +
       

     

       87
       +
       ### Installed Packages

     

       88
       +
       Core utilities, development tools (nodejs, python, go, gcc), nix tools (nixvim, nixd, nil), networking tools (mosh, curl, wget), and more.

     

       89
       +
       

     

       90
       +
       ## Notes

     

       91
       +
       

     

       92
       +
       - Oracle Cloud uses `/dev/sda` as the primary disk device

     

       93
       +
       - The configuration uses disko for declarative disk partitioning

     

       94
       +
       - Hardware configuration will be auto-generated during installation

     

       95
       +
       - Root login via SSH is disabled for security

+171

machines/prattle/default.nix

···

       1
       +
       {

     

       2
       +
         inputs,

     

       3
       +
         lib,

     

       4
       +
         config,

     

       5
       +
         pkgs,

     

       6
       +
         ...

     

       7
       +
       }:

     

       8
       +
       {

     

       9
       +
         imports = [

     

       10
       +
           ./disk-config.nix

     

       11
       +
           ./home-manager.nix

     

       12
       +
       

     

       13
       +
           (inputs.import-tree ../../modules/nixos)

     

       14
       +
         ];

     

       15
       +
       

     

       16
       +
         nixpkgs = {

     

       17
       +
           hostPlatform = "x86_64-linux";

     

       18
       +
           config = {

     

       19
       +
             allowUnfree = true;

     

       20
       +
           };

     

       21
       +
         };

     

       22
       +
       

     

       23
       +
         nix =

     

       24
       +
           let

     

       25
       +
             flakeInputs = lib.filterAttrs (_: lib.isType "flake") inputs;

     

       26
       +
           in

     

       27
       +
           {

     

       28
       +
             settings = {

     

       29
       +
               experimental-features = "nix-command flakes";

     

       30
       +
               flake-registry = "";

     

       31
       +
               nix-path = config.nix.nixPath;

     

       32
       +
               trusted-users = [

     

       33
       +
                 "kierank"

     

       34
       +
               ];

     

       35
       +
             };

     

       36
       +
             channel.enable = false;

     

       37
       +
             optimise.automatic = true;

     

       38
       +
             registry = lib.mapAttrs (_: flake: { inherit flake; }) flakeInputs;

     

       39
       +
             nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;

     

       40
       +
           };

     

       41
       +
       

     

       42
       +
         time.timeZone = "America/New_York";

     

       43
       +
       

     

       44
       +
         environment.systemPackages = with pkgs; [

     

       45
       +
           # core

     

       46
       +
           coreutils

     

       47
       +
           screen

     

       48
       +
           bc

     

       49
       +
           jq

     

       50
       +
           psmisc

     

       51
       +
           # cli_utils

     

       52
       +
           direnv

     

       53
       +
           zsh

     

       54
       +
           gum

     

       55
       +
           vim

     

       56
       +
           # networking

     

       57
       +
           xh

     

       58
       +
           curl

     

       59
       +
           wget

     

       60
       +
           dogdns

     

       61
       +
           inetutils

     

       62
       +
           mosh

     

       63
       +
           # nix_tools

     

       64
       +
           inputs.nixvim.packages.x86_64-linux.default

     

       65
       +
           nixd

     

       66
       +
           nil

     

       67
       +
           nixfmt-rfc-style

     

       68
       +
           inputs.agenix.packages.x86_64-linux.default

     

       69
       +
           # security

     

       70
       +
           openssl

     

       71
       +
           gpgme

     

       72
       +
           gnupg

     

       73
       +
           # dev_langs

     

       74
       +
           nodejs_22

     

       75
       +
           python3

     

       76
       +
           go

     

       77
       +
           gopls

     

       78
       +
           gotools

     

       79
       +
           go-tools

     

       80
       +
           gcc

     

       81
       +
           # misc

     

       82
       +
           neofetch

     

       83
       +
         ];

     

       84
       +
       

     

       85
       +
         programs.nh = {

     

       86
       +
           enable = true;

     

       87
       +
           clean.enable = true;

     

       88
       +
           clean.extraArgs = "--keep-since 4d --keep 3";

     

       89
       +
           flake = "/home/kierank/dots";

     

       90
       +
         };

     

       91
       +
       

     

       92
       +
         age.identityPaths = [

     

       93
       +
           "/home/kierank/.ssh/id_rsa"

     

       94
       +
           "/etc/ssh/id_rsa"

     

       95
       +
         ];

     

       96
       +
       

     

       97
       +
         environment.sessionVariables = {

     

       98
       +
           XDG_CACHE_HOME = "$HOME/.cache";

     

       99
       +
           XDG_CONFIG_HOME = "$HOME/.config";

     

       100
       +
           XDG_DATA_HOME = "$HOME/.local/share";

     

       101
       +
           XDG_STATE_HOME = "$HOME/.local/state";

     

       102
       +
           EDITOR = "nvim";

     

       103
       +
           SYSTEMD_EDITOR = "nvim";

     

       104
       +
           VISUAL = "nvim";

     

       105
       +
         };

     

       106
       +
       

     

       107
       +
         atelier = {

     

       108
       +
           authentication.enable = true;

     

       109
       +
         };

     

       110
       +
       

     

       111
       +
         networking = {

     

       112
       +
           hostName = "prattle";

     

       113
       +
           useDHCP = false;

     

       114
       +
           interfaces.eth0 = {

     

       115
       +
             useDHCP = true;

     

       116
       +
           };

     

       117
       +
           defaultGateway = "10.0.0.1";

     

       118
       +
           nameservers = [

     

       119
       +
             "1.1.1.1"

     

       120
       +
             "1.0.0.1"

     

       121
       +
             "2606:4700:4700::1111"

     

       122
       +
             "2606:4700:4700::1001"

     

       123
       +
           ];

     

       124
       +
         };

     

       125
       +
       

     

       126
       +
         programs.zsh.enable = true;

     

       127
       +
         programs.direnv.enable = true;

     

       128
       +
       

     

       129
       +
         users.users = {

     

       130
       +
           kierank = {

     

       131
       +
             initialPassword = "changeme";

     

       132
       +
             isNormalUser = true;

     

       133
       +
             shell = pkgs.zsh;

     

       134
       +
             openssh.authorizedKeys.keys = [

     

       135
       +
               "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCzEEjvbL/ttqmYoDjxYQmDIq36BabROJoXgQKeh9liBxApwp+2PmgxROzTg42UrRc9pyrkq5kVfxG5hvkqCinhL1fMiowCSEs2L2/Cwi40g5ZU+QwdcwI8a4969kkI46PyB19RHkxg54OUORiIiso/WHGmqQsP+5wbV0+4riSnxwn/JXN4pmnE//stnyAyoiEZkPvBtwJjKb3Ni9n3eNLNs6gnaXrCtaygEZdebikr9kS2g9mM696HvIFgM6cdR/wZ7DcLbG3IdTXuHN7PC3xxL+Y4ek5iMreQIPmuvs4qslbthPGYoYbYLUQiRa9XO5s/ksIj5Z14f7anHE6cuTQVpvNWdGDOigyIVS5qU+4ZF7j+rifzOXVL48gmcAvw/uV68m5Wl/p0qsC/d8vI3GYwEsWG/EzpAlc07l8BU2LxWgN+d7uwBFaJV9VtmUDs5dcslsh8IbzmtC9gq3OLGjklxTfIl6qPiL8U33oc/UwqzvZUrI2BlbagvIZYy6rP+q0= kierank@mockingjay"

     

       136
       +
             ];

     

       137
       +
             extraGroups = [

     

       138
       +
               "wheel"

     

       139
       +
               "networkmanager"

     

       140
       +
             ];

     

       141
       +
           };

     

       142
       +
           root.openssh.authorizedKeys.keys = [

     

       143
       +
             "ssh-rsa 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 kierank@mockingjay"

     

       144
       +
           ];

     

       145
       +
         };

     

       146
       +
       

     

       147
       +
         services.openssh = {

     

       148
       +
           enable = true;

     

       149
       +
           settings = {

     

       150
       +
             PermitRootLogin = "no";

     

       151
       +
             PasswordAuthentication = false;

     

       152
       +
           };

     

       153
       +
         };

     

       154
       +
       

     

       155
       +
         networking.firewall = {

     

       156
       +
           enable = true;

     

       157
       +
           logRefusedConnections = false;

     

       158
       +
           rejectPackets = true;

     

       159
       +
         };

     

       160
       +
       

     

       161
       +
         services.tailscale = {

     

       162
       +
           enable = true;

     

       163
       +
           useRoutingFeatures = "client";

     

       164
       +
         };

     

       165
       +
       

     

       166
       +
         boot.loader.systemd-boot.enable = true;

     

       167
       +
         boot.loader.efi.canTouchEfiVariables = true;

     

       168
       +
         boot.kernelParams = [ "net.ifnames=0" ];

     

       169
       +
       

     

       170
       +
         system.stateVersion = "23.05";

     

       171
       +
       }

+34

machines/prattle/disk-config.nix

···

       1
       +
       # Disko configuration for Oracle Cloud

     

       2
       +
       # Oracle Cloud typically uses /dev/sda for the boot volume

     

       3
       +
       {

     

       4
       +
         disko.devices = {

     

       5
       +
           disk = {

     

       6
       +
             main = {

     

       7
       +
               device = "/dev/sda";

     

       8
       +
               type = "disk";

     

       9
       +
               content = {

     

       10
       +
                 type = "gpt";

     

       11
       +
                 partitions = {

     

       12
       +
                   ESP = {

     

       13
       +
                     type = "EF00";

     

       14
       +
                     size = "500M";

     

       15
       +
                     content = {

     

       16
       +
                       type = "filesystem";

     

       17
       +
                       format = "vfat";

     

       18
       +
                       mountpoint = "/boot";

     

       19
       +
                     };

     

       20
       +
                   };

     

       21
       +
                   root = {

     

       22
       +
                     size = "100%";

     

       23
       +
                     content = {

     

       24
       +
                       type = "filesystem";

     

       25
       +
                       format = "ext4";

     

       26
       +
                       mountpoint = "/";

     

       27
       +
                     };

     

       28
       +
                   };

     

       29
       +
                 };

     

       30
       +
               };

     

       31
       +
             };

     

       32
       +
           };

     

       33
       +
         };

     

       34
       +
       }

+15

machines/prattle/home-manager.nix

···

       1
       +
       { inputs, outputs, ... }:

     

       2
       +
       {

     

       3
       +
         imports = [

     

       4
       +
           inputs.home-manager.nixosModules.home-manager

     

       5
       +
         ];

     

       6
       +
       

     

       7
       +
         home-manager = {

     

       8
       +
           extraSpecialArgs = {

     

       9
       +
             inherit inputs outputs;

     

       10
       +
           };

     

       11
       +
           users = {

     

       12
       +
             kierank = import ./home;

     

       13
       +
           };

     

       14
       +
         };

     

       15
       +
       }

+29

machines/prattle/home/default.nix

···

       1
       +
       { inputs, ... }:

     

       2
       +
       {

     

       3
       +
         imports = [

     

       4
       +
           (inputs.import-tree ../../../modules/home)

     

       5
       +
         ];

     

       6
       +
       

     

       7
       +
         nixpkgs.enable = true;

     

       8
       +
       

     

       9
       +
         home = {

     

       10
       +
           username = "kierank";

     

       11
       +
           homeDirectory = "/home/kierank";

     

       12
       +
         };

     

       13
       +
       

     

       14
       +
         atelier = {

     

       15
       +
           shell = {

     

       16
       +
             enable = true;

     

       17
       +
           };

     

       18
       +
           apps = {

     

       19
       +
             helix.enable = true;

     

       20
       +
             irssi.enable = true;

     

       21
       +
           };

     

       22
       +
         };

     

       23
       +
       

     

       24
       +
         programs.home-manager.enable = true;

     

       25
       +
       

     

       26
       +
         systemd.user.startServices = "sd-switch";

     

       27
       +
       

     

       28
       +
         home.stateVersion = "23.05";

     

       29
       +
       }