Commit d950e04b73a2
Changed files (2)
machine
machine/kobe.nix
@@ -1,72 +0,0 @@
-{ config, pkgs, ... }:
-
-with import ../assets/machines.nix; {
- imports = [ ./home.nix ];
- boot = {
- cleanTmpDir = true;
- };
- networking.firewall = {
- allowPing = true;
- allowedUDPPorts = [ 53 ];
- allowedTCPPorts = [ 53 ];
- };
- nix = {
- distributedBuilds = true;
- buildMachines = [{
- hostName = "honshu.home";
- sshUser = "vincent";
- sshKey = "/home/vincent/.ssh/id_ed25519";
- system = "x86_64-linux";
- maxJobs = 2;
- }];
- };
- profiles = {
- avahi.enable = true;
- git.enable = true;
- nix-config.buildCores = 1;
- ssh.enable = true;
- };
- services = {
- bind = {
- enable = true;
- forwarders = [ "8.8.8.8" "8.8.4.4" ];
- cacheNetworks = [ "192.168.1.0/24" "127.0.0.0/8" "10.100.0.0/24" ];
- zones = [
- {
- # home
- name = "home";
- slaves = [];
- file = ../assets/db.home;
- }
- {
- # home.reverse
- name = "192.168.1.in-addr.arpa";
- slaves = [];
- file = ../assets/db.192.168.1;
- }
- {
- # vpn
- name = "vpn";
- slaves = [];
- file = ../assets/db.vpn;
- }
- {
- # vpn.reverse
- name = "10.100.0.in-addr.arpa";
- slaves = [];
- file = ../assets/db.10.100.0;
- }
- ];
- };
- wireguard = {
- enable = true;
- ips = [ "${wireguard.ips.kobe}/24" ];
- endpoint = wg.endpointIP;
- endpointPort = wg.listenPort;
- endpointPublicKey = wireguard.kerkouane.publicKey;
- };
- };
- users.users.root.openssh.authorizedKeys.keys = [
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGR4dqXwHwPpYgyk6yl9+9LRL3qrBZp3ZWdyKaTiXp0p vincent@shikoku"
- ];
-}
machine/shikoku.nix
@@ -1,75 +0,0 @@
-{ config, pkgs, ... }:
-
-with import ../assets/machines.nix; {
- imports = [ ./home.nix ];
- boot = {
- loader.efi.canTouchEfiVariables = true;
- loader.grub.enable = true;
- loader.grub.version = 2;
- loader.grub.efiSupport = true;
- loader.efi.efiSysMountPoint = "/boot";
- loader.grub.devices = ["nodev"];
- loader.grub.extraEntries = ''
- menuentry "Windows" {
- insmod part_gpt
- insmod fat
- insmod search_fs_uuid
- insmod chain
- search --fs-uuid --no-floppy --set=root 122F-2055
- chainloader ($root)/Microsoft/Boot/bootmgfw.efi
- }
- '';
- loader.grub.useOSProber = true;
- kernelModules = [ "kvm_intel" ];
- kernelParams = [ "kvm_intel.nested=1" ];
- kernel.sysctl = {
- "net.bridge.bridge-nf-call-arptables" = 0;
- "net.bridge.bridge-nf-call-iptables" = 0;
- "net.bridge.bridge-nf-call-ip6tables" = 0;
- };
- };
- networking = {
- firewall.enable = false; # we are in safe territory :D
- bridges.br1.interfaces = [ "enp0s31f6" ];
- interfaces.enp0s31f6 = {
- useDHCP = true;
- };
- };
- profiles = {
- desktop = {
- enable = true;
- networkmanager = false;
- };
- dev.enable = true;
- gaming.enable = true;
- nix-config.buildCores = 4;
- qemu-user = { arm = true; aarch64 = true; };
- ssh.enable = true;
- virtualization = {
- enable = true;
- listenTCP = true;
- };
- };
- programs.podman = {
- enable = true;
- };
- services = {
- syncthing-edge.guiAddress = "${wireguard.ips.shikoku}:8384";
- smartd.enable = true;
- wireguard = {
- enable = true;
- ips = [ "${wireguard.ips.shikoku}/24" ];
- endpoint = wg.endpointIP;
- endpointPort = wg.listenPort;
- endpointPublicKey = wireguard.kerkouane.publicKey;
- };
- xserver = {
- videoDrivers = [ "nvidia" ];
- xrandrHeads = [
- { output = "HDMI-0"; primary = true; }
- { output = "DP-0"; monitorConfig = "Option \"Rotate\" \"right\""; }
- ];
- dpi = 96;
- };
- };
-}