113 lines
2.7 KiB
Nix
113 lines
2.7 KiB
Nix
# Edit this configuration file to define what should be installed on
|
|
# your system. Help is available in the configuration.nix(5) man page
|
|
# and in the NixOS manual (accessible by running `nixos-help`).
|
|
{
|
|
config,
|
|
pkgs,
|
|
myData,
|
|
...
|
|
}: {
|
|
# previously:
|
|
# imports = [(modulesPath + "/installer/scan/not-detected.nix")];
|
|
# as of 23.05 that is:
|
|
hardware.enableRedistributableFirmware = true;
|
|
|
|
boot.initrd.availableKernelModules = ["usbhid"];
|
|
boot.initrd.kernelModules = ["vc4" "bcm2835_dma" "i2c_bcm2835"];
|
|
boot.kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
|
|
boot.kernelModules = [];
|
|
boot.extraModulePackages = [];
|
|
|
|
fileSystems."/" = {
|
|
device = "/dev/disk/by-uuid/44444444-4444-4444-8888-888888888888";
|
|
fsType = "ext4";
|
|
};
|
|
|
|
swapDevices = [];
|
|
|
|
mj = {
|
|
stateVersion = "23.05";
|
|
timeZone = "Europe/Vilnius";
|
|
base = {
|
|
users.passwd = {
|
|
root.passwordFile = config.age.secrets.root-passwd-hash.path;
|
|
motiejus.passwordFile = config.age.secrets.motiejus-passwd-hash.path;
|
|
};
|
|
unitstatus = {
|
|
enable = true;
|
|
email = "motiejus+alerts@jakstys.lt";
|
|
};
|
|
};
|
|
|
|
services = {
|
|
postfix = {
|
|
enable = true;
|
|
saslPasswdPath = config.age.secrets.sasl-passwd.path;
|
|
};
|
|
|
|
deployerbot = {
|
|
follower = {
|
|
enable = true;
|
|
uidgid = myData.uidgid.updaterbot-deployee;
|
|
publicKey = myData.hosts."vno1-oh2.servers.jakst".publicKey;
|
|
};
|
|
};
|
|
|
|
friendlyport.vpn.ports = [
|
|
myData.ports.exporters.node
|
|
];
|
|
};
|
|
};
|
|
|
|
services.prometheus.exporters.node = {
|
|
enable = true;
|
|
enabledCollectors = ["systemd" "processes"];
|
|
port = myData.ports.exporters.node;
|
|
};
|
|
services.tailscale.enable = true;
|
|
|
|
services.pipewire = {
|
|
enable = true;
|
|
alsa.enable = true;
|
|
alsa.support32Bit = true;
|
|
pulse.enable = true;
|
|
};
|
|
|
|
networking = {
|
|
hostId = "4bd17751";
|
|
hostName = "vno1-rp3b";
|
|
domain = "servers.jakst";
|
|
defaultGateway = "192.168.189.4";
|
|
nameservers = ["192.168.189.4"];
|
|
interfaces.enu1u1u1.ipv4.addresses = [
|
|
{
|
|
address = "192.168.189.5";
|
|
prefixLength = 24;
|
|
}
|
|
];
|
|
firewall = {
|
|
allowedUDPPorts = [];
|
|
allowedTCPPorts = [];
|
|
logRefusedConnections = false;
|
|
checkReversePath = "loose"; # for tailscale
|
|
};
|
|
};
|
|
|
|
powerManagement.cpuFreqGovernor = "ondemand";
|
|
|
|
boot.loader.grub.enable = false;
|
|
boot.loader.generic-extlinux-compatible.enable = true;
|
|
|
|
boot.loader.raspberryPi.firmwareConfig = ''
|
|
dtparam=audio=on
|
|
'';
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
libraspberrypi
|
|
];
|
|
|
|
nixpkgs.hostPlatform = "aarch64-linux";
|
|
|
|
security.rtkit.enable = true;
|
|
}
|