summaryrefslogtreecommitdiff
path: root/labsrv01/configuration.nix
diff options
context:
space:
mode:
Diffstat (limited to 'labsrv01/configuration.nix')
-rw-r--r--labsrv01/configuration.nix108
1 files changed, 0 insertions, 108 deletions
diff --git a/labsrv01/configuration.nix b/labsrv01/configuration.nix
deleted file mode 100644
index 50c5a0d..0000000
--- a/labsrv01/configuration.nix
+++ /dev/null
@@ -1,108 +0,0 @@
-{
- inputs,
- modulesPath,
- lib,
- pkgs,
- sops,
- config,
- ...
-}@args:
-{
- imports = [
- inputs.determinate.nixosModules.default
- inputs.disko.nixosModules.disko
- ./disk-config.nix
- inputs.sops-nix.nixosModules.sops
- ./secureboot.nix
- ./network.nix
- ./alt-arrow-vt.nix
-
- inputs.home-manager.nixosModules.home-manager
- ./homes.nix
-
- ./cgit.nix
- ];
- hardware.facter.reportPath = ./facter.json;
-
- nix = {
- extraOptions = ''
- experimental-features = ca-derivations nix-command flakes
- '';
- settings = {
- trusted-users = [ "root" "kjtsanaktsidis" ];
- substituters = [
- "https://cache.nixos.org"
- # the ca-derivations cache seems to be down
- # "https://cache.ngi0.nixos.org/"
- ];
- trusted-public-keys = [
- "cache.ngi0.nixos.org-1:KqH5CBLNSyX184S9BKZJo1LxrxJ9ltnY2uAs5c/f1MA="
- ];
- };
- };
-
- sops = {
- defaultSopsFile = ./secrets.yaml;
- age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
- age.generateKey = false;
-
- secrets = {
- luks_passphrase = { };
- kj_hashed_password = {
- neededForUsers = true;
- };
- ssh_host_key_ed25519 = { };
- ssh_host_key_rsa = { };
- };
- };
-
- system.stateVersion = "25.11";
- swapDevices = [
- {
- device = "/swap/swapfile";
- size = 32768;
- }
- ];
-
- security.sudo.enable = true;
- users.mutableUsers = false;
- users.groups.kjtsanaktsidis = { };
- users.users = {
- kjtsanaktsidis = {
- createHome = true;
- isNormalUser = true;
- description = "KJ Tsanaktsidis";
- group = "kjtsanaktsidis";
- extraGroups = [
- "wheel"
- "networkmanager"
- ];
- shell = pkgs.zsh;
- hashedPasswordFile = config.sops.secrets.kj_hashed_password.path;
- openssh.authorizedKeys.keys = [
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAC/BtvW1c1RbBI8eeGo7oOH2y9byBaxWVDHsErgaE+s kjtsanaktsidis@KJMacbookGroq.local"
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHsyhMLrlNiffDrqz0s46hZF8IdR9/qX63TUyllK0LCA kj@KJ-PC"
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPS77sno1zVa6uO+2wCbBK489snNIp3uvymca2cHX/33 kjtsanaktsidis@labsrv01"
- ];
- };
- };
-
- services.openssh = {
- enable = true;
- hostKeys = [
- {
- type = "ed25519";
- path = config.sops.secrets.ssh_host_key_ed25519.path;
- }
- {
- type = "rsa";
- path = config.sops.secrets.ssh_host_key_rsa.path;
- }
- ];
- };
-
- services.fwupd.enable = true;
-
- # Enable zsh system-wide
- programs.zsh.enable = true;
-}