Compare commits
2 commits
fa1d506357
...
b5047046dc
Author | SHA1 | Date | |
---|---|---|---|
b5047046dc | |||
ecd6f90005 |
3 changed files with 35 additions and 16 deletions
22
flake.lock
generated
22
flake.lock
generated
|
@ -124,11 +124,11 @@
|
||||||
"pyproject-nix": "pyproject-nix"
|
"pyproject-nix": "pyproject-nix"
|
||||||
},
|
},
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1720605900,
|
"lastModified": 1720709248,
|
||||||
"narHash": "sha256-/BTAC3gj1Ot7o/PINsHS2EGEtGUadI12WZlhowKn18c=",
|
"narHash": "sha256-ThoGJ7wEcoKjE9rWVoAqplbfzPK8FCbsrqt9WjGS96w=",
|
||||||
"owner": "nix-community",
|
"owner": "nix-community",
|
||||||
"repo": "dream2nix",
|
"repo": "dream2nix",
|
||||||
"rev": "0c6b5c8ab796f6dfb2aef1133f5b7bb25ce57cb9",
|
"rev": "a3751775d93d70845cdf55c00f28f0074bee7d9c",
|
||||||
"type": "github"
|
"type": "github"
|
||||||
},
|
},
|
||||||
"original": {
|
"original": {
|
||||||
|
@ -872,11 +872,11 @@
|
||||||
"lix": {
|
"lix": {
|
||||||
"flake": false,
|
"flake": false,
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1720633647,
|
"lastModified": 1720697958,
|
||||||
"narHash": "sha256-CjWvti4wFhRmIHpLduohKAVmU9+wI/PAOhQppCWziK8=",
|
"narHash": "sha256-eMvynmI9MQmNPwpiVEXVMhPiC14P53HwSE1EUpEMIa4=",
|
||||||
"ref": "refs/heads/main",
|
"ref": "refs/heads/main",
|
||||||
"rev": "014410cbf0bda9c0fcdaf5f894120883cdc805ce",
|
"rev": "31478c810a79403fbb670ef7c4ef1d0d48271c80",
|
||||||
"revCount": 15944,
|
"revCount": 15947,
|
||||||
"type": "git",
|
"type": "git",
|
||||||
"url": "https://git@git.lix.systems/lix-project/lix"
|
"url": "https://git@git.lix.systems/lix-project/lix"
|
||||||
},
|
},
|
||||||
|
@ -897,11 +897,11 @@
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1719353937,
|
"lastModified": 1720695775,
|
||||||
"narHash": "sha256-86NBqDxAP20ET/UoKX0WvSItblNQ97czXb2q7lkMrwk=",
|
"narHash": "sha256-8Oqzl9QPjEe/n8y0R2tC6+2v/H6xBgABHXOJwxmnBg0=",
|
||||||
"ref": "refs/heads/main",
|
"ref": "refs/heads/main",
|
||||||
"rev": "5d9d94089fb1ca96222a34bfe245ef5c5ebefd37",
|
"rev": "d70318fb946a0e720dfdd1fb10b0645c14e2a02a",
|
||||||
"revCount": 92,
|
"revCount": 94,
|
||||||
"type": "git",
|
"type": "git",
|
||||||
"url": "https://git.lix.systems/lix-project/nixos-module"
|
"url": "https://git.lix.systems/lix-project/nixos-module"
|
||||||
},
|
},
|
||||||
|
|
|
@ -2,18 +2,18 @@
|
||||||
config,
|
config,
|
||||||
lib,
|
lib,
|
||||||
pkgs,
|
pkgs,
|
||||||
|
fleetFlake,
|
||||||
...
|
...
|
||||||
}: let
|
}: let
|
||||||
sshdTmpDirectory = "${config.user.home}/sshd-tmp";
|
sshdTmpDirectory = "${config.user.home}/sshd-tmp";
|
||||||
sshdDirectory = "${config.user.home}/sshd";
|
sshdDirectory = "${config.user.home}/sshd";
|
||||||
pathToPubKey = "/mnt/sdcard/Download/picard_host_key.pub";
|
|
||||||
port = 8022;
|
port = 8022;
|
||||||
in {
|
in {
|
||||||
# Backup etc files instead of failing to activate generation if a file already exists in /etc
|
# Backup etc files instead of failing to activate generation if a file already exists in /etc
|
||||||
environment.etcBackupExtension = ".bak";
|
environment.etcBackupExtension = ".bak";
|
||||||
|
|
||||||
# Read the changelog before changing this value
|
# Read the changelog before changing this value
|
||||||
system.stateVersion = "23.11";
|
system.stateVersion = "24.05";
|
||||||
|
|
||||||
# Set up nix for flakes
|
# Set up nix for flakes
|
||||||
nix.extraOptions = ''
|
nix.extraOptions = ''
|
||||||
|
@ -23,9 +23,25 @@ in {
|
||||||
# Set your time zone
|
# Set your time zone
|
||||||
time.timeZone = "Europe/Rome";
|
time.timeZone = "Europe/Rome";
|
||||||
|
|
||||||
build.activation.sshd = ''
|
home-manager.config = {pkgs, ...}: {
|
||||||
|
home.stateVersion = "24.05";
|
||||||
|
_module.args = {
|
||||||
|
hostname = "janeway";
|
||||||
|
age.secrets = {};
|
||||||
|
};
|
||||||
|
imports = [../../hmModules/shell];
|
||||||
|
};
|
||||||
|
|
||||||
|
build.activation.sshd = let
|
||||||
|
keys = (builtins.import ../../lib).keys;
|
||||||
|
inherit (keys) hosts users;
|
||||||
|
in ''
|
||||||
$DRY_RUN_CMD mkdir $VERBOSE_ARG --parents "${config.user.home}/.ssh"
|
$DRY_RUN_CMD mkdir $VERBOSE_ARG --parents "${config.user.home}/.ssh"
|
||||||
$DRY_RUN_CMD cat ${pathToPubKey} > "${config.user.home}/.ssh/authorized_keys"
|
$DRY_RUN_CMD echo ${hosts.picard} > "${config.user.home}/.ssh/authorized_keys"
|
||||||
|
$DRY_RUN_CMD echo ${hosts.sisko} >> "${config.user.home}/.ssh/authorized_keys"
|
||||||
|
$DRY_RUN_CMD echo ${hosts.kirk} >> "${config.user.home}/.ssh/authorized_keys"
|
||||||
|
$DRY_RUN_CMD echo ${users.ccr-ssh} >> "${config.user.home}/.ssh/authorized_keys"
|
||||||
|
$DRY_RUN_CMD echo ${users.ccr-gpg} >> "${config.user.home}/.ssh/authorized_keys"
|
||||||
|
|
||||||
if [[ ! -d "${sshdDirectory}" ]]; then
|
if [[ ! -d "${sshdDirectory}" ]]; then
|
||||||
$DRY_RUN_CMD rm $VERBOSE_ARG --recursive --force "${sshdTmpDirectory}"
|
$DRY_RUN_CMD rm $VERBOSE_ARG --recursive --force "${sshdTmpDirectory}"
|
||||||
|
@ -42,12 +58,13 @@ in {
|
||||||
'';
|
'';
|
||||||
|
|
||||||
environment.packages = [
|
environment.packages = [
|
||||||
pkgs.vim
|
|
||||||
pkgs.bottom
|
pkgs.bottom
|
||||||
pkgs.helix
|
pkgs.helix
|
||||||
pkgs.stress
|
pkgs.stress
|
||||||
pkgs.openssh
|
pkgs.openssh
|
||||||
pkgs.git
|
pkgs.git
|
||||||
|
pkgs.btop
|
||||||
|
fleetFlake.inputs.ccrEmacs.packages.aarch64-linux.ccrEmacs
|
||||||
(pkgs.writeScriptBin "sshd-start" ''
|
(pkgs.writeScriptBin "sshd-start" ''
|
||||||
#!${pkgs.runtimeShell}
|
#!${pkgs.runtimeShell}
|
||||||
|
|
||||||
|
|
|
@ -291,6 +291,7 @@ in {
|
||||||
internal = true;
|
internal = true;
|
||||||
default = hostname: config:
|
default = hostname: config:
|
||||||
inputs.nix-on-droid.lib.nixOnDroidConfiguration {
|
inputs.nix-on-droid.lib.nixOnDroidConfiguration {
|
||||||
|
pkgs = inputs.nixpkgsUnstable.legacyPackages.aarch64-linux;
|
||||||
modules = [
|
modules = [
|
||||||
({
|
({
|
||||||
lib,
|
lib,
|
||||||
|
@ -298,6 +299,7 @@ in {
|
||||||
...
|
...
|
||||||
}: {
|
}: {
|
||||||
nixpkgs.overlays = config.overlays;
|
nixpkgs.overlays = config.overlays;
|
||||||
|
_module.args.fleetFlake = self;
|
||||||
})
|
})
|
||||||
"${self.outPath}/hosts/${hostname}"
|
"${self.outPath}/hosts/${hostname}"
|
||||||
];
|
];
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue