commit d616cdca1f12acd3d40988c6097162f28c929209 · nekomimi.pet/nixcfg

+19 -4

hosts/valefar/default.nix

···

       6
       6
        
           # Host-specific hardware

     

       7
       7
        
           ./hardware.nix

     

       8
       8
        
           ./secrets.nix

     

       9
       9
       -
           ../../common/nvidia.nix

     

       9
       9
       +
           #../../common/nvidia.nix

     

       10
       10
        
           

     

       11
       11
        
           # Common modules shared across hosts

     

       12
       12
        
           ../../common/system.nix

     
···

       44
       44
        
       

     

       45
       45
        
         services.resolved = {

     

       46
       46
        
           enable      = true;

     

       47
       47
       -
           dnssec      = "true";

     

       47
       47
       +
           dnssec      = "false";

     

       48
       48
        
           domains     = [ "~." ];

     

       49
       49
       -
           fallbackDns = [ "10.0.0.210" "1.0.0.1#one.one.one.one" ];

     

       50
       50
       -
           dnsovertls  = "true";

     

       49
       49
       +
           fallbackDns = [ "10.0.0.210" "1.1.1.1" ];

     

       50
       50
       +
           dnsovertls  = "false";

     

       51
       51
        
         };

     

       52
       52
        
         

     

       53
       53
        
         boot.supportedFilesystems = [ "zfs" ];

     
···

       56
       56
        
         boot.zfs.extraPools = [ "garage" "storage" ];

     

       57
       57
        
         boot.zfs.devNodes = "/dev/disk/by-id";

     

       58
       58
        
         boot.zfs.forceImportAll = true;

     

       59
       59
       +
       

     

       60
       60
       +
         /*boot.kernelParams = [ "ip=dhcp" ];

     

       61
       61
       +
         boot.initrd = {

     

       62
       62
       +
           availableKernelModules = [ "r8169" ];

     

       63
       63
       +
           network = {

     

       64
       64
       +
             enable = true;

     

       65
       65
       +
             ssh = {

     

       66
       66
       +
               enable = true;

     

       67
       67
       +
               port = 22;

     

       68
       68
       +
               authorizedKeys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ0pU82lV9dSjkgYbdh9utZ5CDM2dPN70S5fBqN1m3Pb" ];

     

       69
       69
       +
               hostKeys = [ "/etc/secrets/initrd/ssh_host_rsa_key" ];

     

       70
       70
       +
               shell = "/bin/cryptsetup-askpass";

     

       71
       71
       +
             };

     

       72
       72
       +
           };

     

       73
       73
       +
         };*/

     

       59
       74
        
       

     

       60
       75
        
         systemd.services.zfs-import-cache.enable = false;

     

       61
       76
        
         systemd.services.zfs-import-scan.enable = true;

+4 -3

hosts/valefar/hardware.nix

···

       8
       8
        
           [ (modulesPath + "/installer/scan/not-detected.nix")

     

       9
       9
        
           ];

     

       10
       10
        
       

     

       11
       11
       -
         boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "uas" "sd_mod" ];

     

       11
       11
       +
         boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "mpt3sas" "sd_mod" ];

     

       12
       12
        
         boot.initrd.kernelModules = [ ];

     

       13
       13
       -
         boot.kernelModules = [ "kvm-intel" ];

     

       13
       13
       +
         boot.kernelModules = [ "kvm-amd" ];

     

       14
       14
        
         boot.extraModulePackages = [ ];

     

       15
       15
        
       

     

       16
       16
        
         fileSystems."/" = {

     
···

       38
       38
        
       

     

       39
       39
        
         # Fan Control

     

       40
       40
        
         hardware.fancontrol = {

     

       41
       41
       -
           enable = true;

     

       41
       41
       +
           enable = false;

     

       42
       42
        
           config = ''

     

       43
       43
        
       INTERVAL=10

     

       44
       44
        
       DEVPATH=hwmon1=devices/platform/nct6775.2592 hwmon2=devices/platform/coretemp.0

     
···

       59
       59
        
         # still possible to use this option, but it's recommended to use it in conjunction

     

       60
       60
        
         # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.

     

       61
       61
        
         networking.useDHCP = lib.mkDefault true;

     

       62
       62
       +
         hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;

     

       62
       63
        
         # networking.interfaces.enp0s31f6.useDHCP = lib.mkDefault true;

     

       63
       64
        
       }