Commit 540ac4d4fe45

@@ -1,75 +0,0 @@
-{
-  pkgs,
-  config,
-  lib,
-  ...
-}:
-{
-  environment.systemPackages = with pkgs; [
-    sbctl
-  ];
-  boot = {
-    # Secure boot configuration
-    # bootspec.enable = true;
-    # First boot systemd-boot has to be enabled, then switch to lanzaboote
-    # loader.systemd-boot.enable = lib.mkForce false;
-    # lanzaboote = {
-    # enable = true;
-    # pkiBundle = "/var/lib/sbctl";
-    # };
-    initrd.availableKernelModules = [
-      "nvme"
-      "rtsx_pci_sdmmc"
-      "thunderbolt"
-      "dm-mod"
-    ];
-    # loader.systemd-boot.netbootxyz.enable = true;
-    initrd.luks.devices."cryptroot" = {
-      keyFile = "/dev/disk/by-id/mmc-SDC_0x00011fd6";
-      keyFileSize = 4096;
-    };
-    initrd.systemd.enableTpm2 = lib.mkForce false;
-
-    blacklistedKernelModules = [
-      "sierra_net" # sierra wireless modules
-      "cdc_mbim" # modem mobile broadband modules
-      "cdc_ncm" # similar
-    ];
-    initrd.kernelModules = [
-      "vfio_pci"
-      "vfio"
-      "vfio_iommu_type1"
-
-      "nvidia"
-      "nvidia_modeset"
-      "nvidia_uvm"
-      "nvidia_drm"
-    ];
-    kernelModules = [
-      "ahci" # sata controller, might not be needed
-      "nvme" # required for nvme disks
-      "thunderbolt" # required for thunderbolt (dock, …)
-      # from thinkpad x1 gen 9
-      "dm-mod"
-      "cryptd" # required for encryption
-      "xhci_pci" # usb controller related
-      "usb_storage" # usb storage related
-      "sd_mod" # block device related
-      "sdhci_pci" # block device related as well
-      "aesni-intel" # advanced encryption for intel
-      "kvm_intel"
-      "kvm-intel"
-      "nvidia"
-    ];
-    extraModulePackages = [
-      config.boot.kernelPackages.nvidiaPackages.stable
-      config.boot.kernelPackages.nvidia_x11
-    ];
-    kernelParams = [
-      "intel_iommu=on"
-      "kvm_intel.nested=1"
-      # ("vfio-pci.ids=" + lib.concatStringsSep "," gpuIDs)
-    ];
-    kernelPackages = pkgs.linuxPackages_latest;
-  };
-}

@@ -1,50 +0,0 @@
-_: {
-  disko.devices = {
-    disk = {
-      # 512GB root/boot drive. Configured with:
-      # - A FAT32 ESP partition for systemd-boot
-      # - A LUKS container which contains an EXT4 filesystem
-      root = {
-        type = "disk";
-        device = ""; # FIXME
-        content = {
-          type = "gpt";
-          partitions = {
-            ESP = {
-              size = "1G";
-              type = "EF00";
-              content = {
-                type = "filesystem";
-                format = "vfat";
-                mountpoint = "/boot";
-                mountOptions = [ "umask=0077" ];
-              };
-            };
-            root = {
-              size = "100%";
-              content = {
-                # LUKS passphrase will be prompted interactively only
-                type = "luks";
-                name = "cryptroot";
-                askPassword = true;
-                settings = {
-                  allowDiscards = true;
-                };
-                content = {
-                  type = "filesystem";
-                  format = "ext4";
-                  mountpoint = "/";
-                  mountOptions = [
-                    "noatime"
-                    "nodiratime"
-                    "discard"
-                  ];
-                };
-              };
-            };
-          };
-        };
-      };
-    };
-  };
-}

@@ -1,51 +0,0 @@
-{
-  libx,
-  globals,
-  pkgs,
-  lib,
-  ...
-}:
-{
-  imports = [
-    ../common/services/prometheus-exporters-node.nix
-    ../common/services/containers.nix
-    ../common/services/docker.nix
-    ../common/services/libvirt.nix
-  ];
-
-  # TODO make it an option ? (otherwise I'll add it for all)
-  users.users.vincent.linger = true;
-
-  # networking.firewall.enable = false;
-  nixpkgs.config.cudaSupport = true;
-  nixpkgs.config.rocmSupport = lib.mkForce false;
-
-  services = {
-    logind.settings.Login = {
-      HandleLidSwitch = "ignore";
-      HandleLidSwitchExternalPower = "ignore";
-      HandleLidSwitchDocked = "ignore";
-    };
-    wireguard = {
-      enable = true;
-      ips = libx.wg-ips globals.machines.kobe.net.vpn.ips;
-      endpoint = "${globals.net.vpn.endpoint}";
-      endpointPublicKey = "${globals.machines.kerkouane.net.vpn.pubkey}";
-    };
-    ollama = {
-      enable = true;
-      package = pkgs.ollama.override {
-        config.cudaSupport = true;
-        config.rocmSupport = false;
-      };
-      acceleration = "cuda"; # no nivida :D
-    };
-    smartd = {
-      enable = true;
-      devices = [ { device = "/dev/nvme0n1"; } ];
-    };
-  };
-
-  security.apparmor.enable = true;
-  security.tpm2.enable = lib.mkForce false;
-}

@@ -1,43 +0,0 @@
-{
-  inputs,
-  lib,
-  config,
-  ...
-}:
-{
-  imports = [
-    inputs.disko.nixosModules.disko
-    (import ./disks.nix { inherit lib; })
-
-    inputs.nixos-hardware.nixosModules.lenovo-thinkpad-p50
-
-    ../common/hardware/acpid.nix
-  ];
-
-  networking = {
-    # hostId = builtins.substring 0 8 (builtins.hashString "md5" config.networking.hostName); # This was for ZFS
-    # Bridge setup
-    bridges.br1.interfaces = [ "enp0s31f6" ];
-    useDHCP = false;
-    interfaces.br1 = {
-      useDHCP = true;
-    };
-    # FIXME probably change this
-    firewall.enable = false; # we are in safe territory :D
-  };
-  hardware.nvidia = {
-    modesetting.enable = true;
-    open = false;
-    nvidiaSettings = true;
-    package = config.boot.kernelPackages.nvidiaPackages.stable;
-  };
-  hardware.graphics = {
-    enable = true;
-  };
-  nixpkgs.config.allowUnfree = true;
-
-  hardware = {
-    enableAllFirmware = true;
-  };
-
-}

@@ -1,3 +0,0 @@
-_: {
-  systemd.user.services.syncthing.Install.WantedBy = [ "multi-user.target" ];
-}