This commit is contained in:
Andrea Ciceri 2022-12-28 17:26:53 +01:00
parent c49c7d0196
commit 021ee17f1b
No known key found for this signature in database
GPG key ID: A1FC89532D1C5654
18 changed files with 175 additions and 16 deletions

View file

@ -313,16 +313,18 @@
139 # samba
443 # https
445 # samba
4662
4712 # amule
4711 # amule web gui
8384 # syncthing
53 # dns
];
allowedUDPPorts = [
137 # samba
137
138 # samba
51820 # wireguard
53 # dns
4665
4672 # amule
];
};

13
hosts/rock5b/default.nix Normal file
View file

@ -0,0 +1,13 @@
{fleetModules, ...}: {
imports =
[
./hardware-configuration.nix
]
++ fleetModules [
"common"
"ssh"
"ccr"
];
ccr.enable = true;
}

View file

@ -0,0 +1,15 @@
{lib, ...}: {
fileSystems = {
"/" = {
device = "/dev/disk/by-label/NIXOS_ROOTFS";
fsType = "ext4";
};
};
swapDevices = [];
boot.loader = {
grub.enable = false;
generic-extlinux-compatible.enable = true;
};
}

View file

@ -28,6 +28,7 @@
"transmission"
"udisks2"
"xdg"
"nix-development"
];
ccr = {
@ -77,6 +78,7 @@
boot.initrd.kernelModules = [];
boot.kernelModules = ["kvm-intel"];
boot.extraModulePackages = [];
boot.kernelPackages = pkgs.linuxPackages_zen;
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
# (the default) this is the recommended approach. When using systemd-networkd it's

View file

@ -5,7 +5,6 @@
}: {
boot.supportedFilesystems = ["zfs"];
networking.hostId = "adf0b5e7";
boot.kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
boot.loader.efi.efiSysMountPoint = "/boot/efi";
boot.loader.efi.canTouchEfiVariables = false;
boot.loader.generationsDir.copyKernels = true;
@ -27,11 +26,23 @@
cp -r /boot/efi/EFI $ESP_MIRROR
for i in /boot/efis/*; do
cp -r $ESP_MIRROR/EFI $i
done
done wv
rm -rf $ESP_MIRROR
'';
boot.loader.grub.devices = [
"/dev/disk/by-id/nvme-INTEL_SSDPEKKF010T8L_PHHP938405741P0D"
];
users.users.root.initialHashedPassword = "$6$EqXfyFLxUZfpmJ8F$UH3pLcHwgLpOZwiSDhdq/iR/p.uyZZYlk6G4Q0S8BtYr3Qt2xKU56Fwv3Mgco.J0i3cx1Nm8XMfvythSuv8gh/";
# TODO: remove this when it will be no more necessary
boot.zfs.enableUnstable = true;
nixpkgs.overlays = [
(self: super: {
linuxPackages_zen = super.linuxPackages_zen.extend (lpSelf: lpSuper: {
zfsUnstable = lpSuper.zfsUnstable.overrideAttrs (_: {
meta.broken = false;
});
});
})
];
}