commit edef24fa08984cb7ab44dc2839773df59f74b9bd · nekomimi.pet/nixcfg

+1 -1

common/services.nix

···

       13
       13
        
           gnumake

     

       14
       14
        
           parted

     

       15
       15
        
           zfs

     

       16
       16
       -
       

     

       16
       16
       +
           nixos-generators

     

       17
       17
        
           sqlite

     

       18
       18
        
         ];

     

       19
       19

+7

common/users.nix

···

       10
       10
        
           ];

     

       11
       11
        
         };

     

       12
       12
        
       

     

       13
       13
       +
         users.users.root = {

     

       14
       14
       +
           openssh.authorizedKeys.keys = [

     

       15
       15
       +
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTESAAAAIJ0pUS@lV9dSjkgYbdh9utZ5CDM2dPN70S5fBqN1m3Pb"

     

       16
       16
       +
             "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCS9VBRE13jojnqVjuUZWTcOK8GokDDlk2U0i61vEJizVzNowGnIAbwq0cOaFEBX4JBkOa4I8Ku2Pw7fODuoehSK/t7FrfXExk2PBT3k0mfzqQYxfq5bzae7AWr7n/sKUBTtvHSACfidxzQpV7VSgW68jqdOt6h7FHSeS2jac7wUNPobL0uCkFB4FiEQOnIqlRGSSabVemL7bC9H9lUyOODSTthiq9S3pPYknyHDRKUtSCSw4pfpasr4bxDVSW99h3GBcW0hZbpw5bwlxQlwbclxQDnn7XJhWpq6zL/2ScVGJgd94z7FshKoF5IFTk6e7a/Ouv4Ato4hRLxEe5u70CH ssh-key-2023-07-11"

     

       17
       17
       +
           ];

     

       18
       18
       +
         };

     

       19
       19
       +
       

     

       13
       20
        
         programs.git = {

     

       14
       21
        
           enable = true;

     

       15
       22
        
           config = {

+17

flake.lock

···

       209
       209
        
               "url": "https://git.lix.systems/lix-project/nixos-module/archive/2.93.0.tar.gz"

     

       210
       210
        
             }

     

       211
       211
        
           },

     

       212
       212
       +
           "nixos-hardware": {

     

       213
       213
       +
             "locked": {

     

       214
       214
       +
               "lastModified": 1748942041,

     

       215
       215
       +
               "narHash": "sha256-HEu2gTct7nY0tAPRgBtqYepallryBKR1U8B4v2zEEqA=",

     

       216
       216
       +
               "owner": "nixos",

     

       217
       217
       +
               "repo": "nixos-hardware",

     

       218
       218
       +
               "rev": "fc7c4714125cfaa19b048e8aaf86b9c53e04d853",

     

       219
       219
       +
               "type": "github"

     

       220
       220
       +
             },

     

       221
       221
       +
             "original": {

     

       222
       222
       +
               "owner": "nixos",

     

       223
       223
       +
               "ref": "master",

     

       224
       224
       +
               "repo": "nixos-hardware",

     

       225
       225
       +
               "type": "github"

     

       226
       226
       +
             }

     

       227
       227
       +
           },

     

       212
       228
        
           "nixpkgs": {

     

       213
       229
        
             "locked": {

     

       214
       230
        
               "lastModified": 1745391562,

     
···

       277
       293
        
               "catppuccin": "catppuccin",

     

       278
       294
        
               "home-manager": "home-manager_2",

     

       279
       295
        
               "lix-module": "lix-module",

     

       296
       296
       +
               "nixos-hardware": "nixos-hardware",

     

       280
       297
        
               "nixpkgs": "nixpkgs_3",

     

       281
       298
        
               "vscode-server": "vscode-server",

     

       282
       299
        
               "zen-browser": "zen-browser"

+17

flake.nix

···

       2
       2
        
       {

     

       3
       3
        
         inputs = {

     

       4
       4
        
           nixpkgs.url = "github:nixos/nixpkgs/nixos-25.05";

     

       5
       5
       +
           nixos-hardware.url = "github:nixos/nixos-hardware/master";

     

       6
       6
       +
       

     

       5
       7
        
           lix-module = {

     

       6
       8
        
             url = "https://git.lix.systems/lix-project/nixos-module/archive/2.93.0.tar.gz";

     

       7
       9
        
             inputs.nixpkgs.follows = "nixpkgs";

     
···

       94
       96
        
                   agenix.nixosModules.default

     

       95
       97
        
                 ];

     

       96
       98
        
               };

     

       99
       99
       +
       

     

       100
       100
       +
               morax = nixpkgs.lib.nixosSystem {

     

       101
       101
       +
                 system = "aarch64-linux";

     

       102
       102
       +
                 specialArgs = {

     

       103
       103
       +
                   inherit inputs;

     

       104
       104
       +
                   system = "aarch64-linux";

     

       105
       105
       +
                 };

     

       106
       106
       +
                 modules = [

     

       107
       107
       +
                   ./hosts/morax

     

       108
       108
       +
                   nixos-hardware.nixosModules.raspberry-pi-4

     

       109
       109
       +
                   

     

       110
       110
       +
                   agenix.nixosModules.default

     

       111
       111
       +
                 ];

     

       112
       112
       +
               };

     

       113
       113
       +
       

     

       97
       114
        
       

     

       98
       115
        
               # Easy to add more hosts

     

       99
       116
        
               /*

+2 -2

hosts/focalor/default.nix

···

       28
       28
        
       

     

       29
       29
        
         # pin host platform & microcode

     

       30
       30
        
         nixpkgs.hostPlatform               = lib.mkDefault "x86_64-linux";

     

       31
       31
       -
         hardware.cpu.intel.updateMicrocode = lib.mkDefault

     

       32
       32
       -
           config.hardware.enableRedistributableFirmware;

     

       31
       31
       +
       

     

       32
       32
       +
         boot.binfmt.emulatedSystems = [ "aarch64-linux" ];

     

       33
       33
        
       

     

       34
       34
        
         networking.hostName = "focalor";

     

       35
       35
        
         networking.hostId = "84bdc587";

+45

hosts/morax/default.nix

···

       1
       1
       +
       { config, lib, pkgs, modulesPath, inputs, ... }:

     

       2
       2
       +
       

     

       3
       3
       +
       {

     

       4
       4
       +
         imports = [

     

       5
       5
       +
           ./hardware.nix

     

       6
       6
       +
           ./secrets.nix

     

       7
       7
       +
           

     

       8
       8
       +
           ../../common/system.nix

     

       9
       9
       +
           ../../common/users.nix

     

       10
       10
       +
           ../../common/services.nix

     

       11
       11
       +
           ../../host-secrets.nix

     

       12
       12
       +
         ];

     

       13
       13
       +
       

     

       14
       14
       +
         system.stateVersion = "25.05";

     

       15
       15
       +
       

     

       16
       16
       +
         nixpkgs.hostPlatform = lib.mkDefault "aarch64-linux";

     

       17
       17
       +
         hardware.enableRedistributableFirmware = true;

     

       18
       18
       +
         hardware.enableAllHardware = lib.mkForce false; #https://github.com/NixOS/nixpkgs/issues/154163#issuecomment-2868994145

     

       19
       19
       +
       

     

       20
       20
       +
         networking = {

     

       21
       21
       +
           hostName = "morax";

     

       22
       22
       +
           hostId = "2631a44a";

     

       23
       23
       +
           firewall.enable = false;

     

       24
       24
       +
           defaultGateway = {

     

       25
       25
       +
             address = "10.0.0.1";

     

       26
       26
       +
             interface = "eth0";

     

       27
       27
       +
           };

     

       28
       28
       +
           nameservers = [ "1.1.1.1" ];

     

       29
       29
       +
           interfaces.eth0 = {

     

       30
       30
       +
             ipv4.addresses = [{

     

       31
       31
       +
               address = "10.0.0.210";

     

       32
       32
       +
               prefixLength = 24;

     

       33
       33
       +
             }];

     

       34
       34
       +
           };

     

       35
       35
       +
         };

     

       36
       36
       +
       

     

       37
       37
       +
         environment.systemPackages = with pkgs; [

     

       38
       38
       +
           inputs.agenix.packages.aarch64-linux.default

     

       39
       39
       +
         ];

     

       40
       40
       +
       

     

       41
       41
       +
         virtualisation.docker = {

     

       42
       42
       +
           enable = true;

     

       43
       43
       +
           enableOnBoot = true;

     

       44
       44
       +
         };

     

       45
       45
       +
       }

+3

hosts/morax/hardware.nix

+3

hosts/morax/secrets.nix