39 lines
984 B
Nix
39 lines
984 B
Nix
|
{ lib, config, ... }: {
|
||
|
|
nixpkgs.hostPlatform = "x86_64-linux";
|
||
|
|
hardware.enableRedistributableFirmware = true;
|
||
|
|
boot.initrd.availableKernelModules = [
|
||
|
|
"ata_piix"
|
||
|
|
"usb_storage"
|
||
|
|
"usbhid"
|
||
|
|
"sd_mod"
|
||
|
|
];
|
||
|
|
|
||
|
|
age.secrets.naos_userasdf_password = {
|
||
|
|
rekeyFile = ./secrets/password.age;
|
||
|
|
owner = "userasdf";
|
||
|
|
group = "users";
|
||
|
|
mode = "0400";
|
||
|
|
};
|
||
|
|
|
||
|
|
n.host = {
|
||
|
|
hardware.cpu = "intel";
|
||
|
|
bootloader = "sysdboot";
|
||
|
|
|
||
|
|
hostId = "553fb274";
|
||
|
|
users."userasdf" = lib.mkUser config.age.secrets.naos_userasdf_password.path true;
|
||
|
|
defaultUser = "userasdf";
|
||
|
|
types = [ "server" ];
|
||
|
|
};
|
||
|
|
|
||
|
|
imports = [
|
||
|
|
(lib.fs.zfs "/nix" "rpool/nix" null)
|
||
|
|
(lib.fs.luks "cryptroot"
|
||
|
|
"/dev/disk/by-partuuid/ed673238-50b1-4ebf-b6fc-4a25568917c6"
|
||
|
|
{ allowDiscards = true; # Used if primary device is a SSD
|
||
|
|
preLVM = true; })
|
||
|
|
|
||
|
|
(lib.fs.tmpfs "/" "none" [ "mode=755" "size=30%" ])
|
||
|
|
(lib.fs.vfat "/boot" "/dev/disk/by-uuid/CDA1-7D4A" null)
|
||
|
|
];
|
||
|
|
}
|