Files
nix-stuff/prophecy/default.nix
Shelvacu 91a27769ba stuff
2025-05-23 17:56:46 -07:00

75 lines
2.0 KiB
Nix

{ ... }:
{
imports = [
./impermanence.nix
./hardware.nix
./btrfs.nix
./genieacs.nix
./networking.nix
./doof.nix
./sops.nix
(
{
config,
lib,
pkgs,
...
}:
{
options.vacu.initramContents = lib.mkOption {
default = pkgs.runCommand "initram-contents" { } ''
mkdir -p $out
cd $out
${pkgs.zstd}/bin/zstdcat ${config.system.build.initialRamdisk}/initrd | ${pkgs.cpio}/bin/cpio -idmv
'';
};
}
)
];
boot.loader.systemd-boot.enable = true;
boot.loader.systemd-boot.memtest86.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
boot.loader.efi.efiSysMountPoint = "/boot";
# boot.initrd.systemd.services."debug-shell".wantedBy = [ "sysinit.target" ];
vacu.hostName = "prophecy";
vacu.shortHostName = "prop";
vacu.shell.color = "green";
vacu.verifySystem.expectedMac = "6c:02:e0:43:02:7a";
vacu.systemKind = "server";
networking.hostId = "f6236a3d";
networking.networkmanager.enable = true;
services.openssh.enable = true;
system.stateVersion = "24.11";
users.mutableUsers = false;
users.users.root.initialHashedPassword = "$2b$15$D66qIGBJm27pTuX1Rc6aeuQGcrX71T2Gxg.PmTYPAdOnDI1trCtqC";
users.users.shelvacu.initialHashedPassword = "$2b$15$D66qIGBJm27pTuX1Rc6aeuQGcrX71T2Gxg.PmTYPAdOnDI1trCtqC";
environment.etc."nixos/flake.nix".source = "/home/shelvacu/dev/nix-stuff/flake.nix";
# zfs can break with hibernate but takes no steps to warn/prevent this >:(
boot.kernelParams = [ "nohibernate" ];
boot.supportedFilesystems = [
# nice to have for mounting disk images
"zfs"
"ntfs"
"ext4"
"btrfs"
"f2fs"
"xfs"
"exfat"
"vfat"
"squashfs"
"reiserfs"
# "bcachefs"
"unionfs-fuse"
"jfs"
];
networking.firewall.allowedTCPPorts = [ 5201 ]; # default port for iperf3
systemd.services.systemd-networkd.environment.SYSTEMD_LOG_LEVEL = "debug";
}