diff --git a/flake.nix b/flake.nix index 45f93d3..697a83a 100644 --- a/flake.nix +++ b/flake.nix @@ -162,6 +162,31 @@ # ]; }; + nixosConfigurations."thancred" = nixpkgs.lib.nixosSystem { + system = "x86_64-linux"; + specialArgs = { + inherit userName userEmail vintage-story; + hostname = "thancred"; + role = "server"; + }; + modules = [ + myOverlays + ./modules/common + ./modules/machine/thancred + + home-manager.nixosModules.home-manager + { + home-manager.useGlobalPkgs = true; + home-manager.useUserPackages = true; + home-manager.extraSpecialArgs = extraSpecialArgs // { isNixOS = true; role = "server"; }; + home-manager.backupFileExtension = "bak"; + home-manager.users.${userName}.imports = [ + ./home + ]; + } + ]; + }; + # generic non-NixOS Linux machine homeConfigurations."generic" = let hostname = builtins.getEnv "HOSTNAME"; diff --git a/home/packages/.linux.nix.swp b/home/packages/.linux.nix.swp new file mode 100644 index 0000000..2b07d50 Binary files /dev/null and b/home/packages/.linux.nix.swp differ diff --git a/home/packages/linux.nix b/home/packages/linux.nix index 79436a2..df40f8f 100644 --- a/home/packages/linux.nix +++ b/home/packages/linux.nix @@ -3,16 +3,5 @@ lib.mkIf pkgs.stdenv.isLinux { home.packages = with pkgs; [ imv xdg-utils - ] ++ lib.optionals isNixOS [ - betterdiscordctl - vesktop - xfce.thunar - pavucontrol - godot - aseprite - zathura - gpu-screen-recorder - gpu-screen-recorder-gtk - inetutils ]; } diff --git a/modules/machine/thancred/configuration.nix b/modules/machine/thancred/configuration.nix new file mode 100644 index 0000000..4d5d285 --- /dev/null +++ b/modules/machine/thancred/configuration.nix @@ -0,0 +1,83 @@ +{ + pkgs, + userName, + vintage-story, + ... +}: { + imports = [ + ../../pwrMgmt + ../../networking/core.nix + ../../virtualization/podman.nix + ]; + + # Enable flakes for NixOS + nix.settings.experimental-features = ["nix-command" "flakes"]; + + # Custom kernel/boot stuff + boot.kernelPackages = pkgs.linuxPackages_latest; + boot.loader.systemd-boot.enable = true; + boot.loader.efi.canTouchEfiVariables = true; + + # Set your timezone + time.timeZone = "America/Detroit"; + + # Enable OpenSSH + services.openssh.enable = true; + + # Enable keyring + services.gnome.gnome-keyring.enable = true; + + # Enable GnuPG + programs.gnupg.agent = { + enable = true; + enableSSHSupport = true; + }; + + # Enable SUID wrappers (some programs need them) + programs.mtr.enable = true; + + # Enable Polkit + security.polkit.enable = true; + + # Power management (see ../../pwrMgmt/default.nix) + pwrMgmt = { + enable = true; + cpuFreqGovernor = "performance"; + powertop.enable = false; + }; + + network = { + firewall = { + enable = true; + tcpPorts = { + allowedPorts = [ 42420 ]; + }; + udpPorts = { + allowedPorts = [ 42420 ]; + }; + }; + networkManager.enable = true; + }; + + environment.systemPackages = [ + vintage-story.packages.${pkgs.system}.default + ]; + + # Podman module (see ../../virtualization/podman.nix) + # podman = { + # enable = true; + # extraPackages = with pkgs; [ + # docker-credential-helpers + # toolbox + # cosign + # crane + # podman-tui + # podman-desktop + # ]; + # }; + + # Add username to groups "wheel" and "video" - more may be added here later + users.users.${userName}.extraGroups = ["wheel" "podman" "network"]; + + system.stateVersion = "24.11"; +} diff --git a/modules/machine/thancred/default.nix b/modules/machine/thancred/default.nix new file mode 100644 index 0000000..3c4d411 --- /dev/null +++ b/modules/machine/thancred/default.nix @@ -0,0 +1,6 @@ +{ ... }: { + imports = [ + ./configuration.nix + ./hardware-configuration.nix + ]; +} diff --git a/modules/machine/thancred/hardware-configuration.nix b/modules/machine/thancred/hardware-configuration.nix new file mode 100644 index 0000000..382377f --- /dev/null +++ b/modules/machine/thancred/hardware-configuration.nix @@ -0,0 +1,32 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ config, lib, pkgs, modulesPath, ... }: + +{ + imports = + [ (modulesPath + "/profiles/qemu-guest.nix") + ]; + + boot.initrd.availableKernelModules = [ "ahci" "xhci_pci" "virtio_pci" "virtio_scsi" "sr_mod" "virtio_blk" ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ "kvm-intel" ]; + boot.extraModulePackages = [ ]; + + fileSystems."/" = + { device = "/dev/disk/by-uuid/e2e621c1-0090-472a-99d9-61c6a87bd068"; + fsType = "ext4"; + }; + + fileSystems."/boot" = + { device = "/dev/disk/by-uuid/663E-15C0"; + fsType = "vfat"; + options = [ "fmask=0022" "dmask=0022" ]; + }; + + swapDevices = + [ { device = "/dev/disk/by-uuid/60104b1a-4285-4dd1-be5e-3c3dee24515a"; } + ]; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; +}