krops: add glotzbert

hosts/glotzbert/configuration.nix

@@ -7,40 +7,47 @@
     users.k-ot = true;
     isInHq = true;
     hq.interface = "eno1";
+    hq.enableBinaryCache = false;
     enableHail = false;
   };
 
   nixpkgs.config.allowUnfree = true;
   nix = {
     useSandbox = true;
-    buildCores = 2;
+    buildCores = 4;
+    maxJobs = 4;
   };
 
   # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
-  boot.kernelPackages = pkgs.linuxPackages_4_19;
+  boot.kernelPackages = pkgs.linuxPackages_latest;
 
   networking.hostName = "glotzbert"; # Define your hostname.
   # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
+  networking.interfaces.eno1.useDHCP = true;
 
   # Configure network proxy if necessary
   # networking.proxy.default = "http://user:password@proxy:port/";
   # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
 
   # Select internationalisation properties.
-  i18n = {
-    consoleFont = "${pkgs.terminus_font}/share/consolefonts/ter-u28n.psf.gz";
-    consoleKeyMap = "us";
-    defaultLocale = "en_US.UTF-8";
+  console = {
+    font = "${pkgs.terminus_font}/share/consolefonts/ter-u28n.psf.gz";
+    keyMap = "de";
   };
+  i18n.defaultLocale = "en_US.UTF-8";
 
   # Set your time zone.
   time.timeZone = "Europe/Berlin";
 
   # List packages installed in system profile. To search, run:
   # $ nix search wget
-  environment.systemPackages = with pkgs; [ wget vim x11vnc ];
+  environment.systemPackages = with pkgs; [
+    wget vim git tmux screen
+    chromium firefox
+    mpv kodi
+  ];
 
   systemd.user.services.x11vnc = {
     description = "X11 VNC server";
@@ -108,11 +115,11 @@
         user = "k-ot";
       };
     };
+    defaultSession = "gnome-xorg";
   };
   services.xserver.desktopManager = {
     gnome3.enable = true;
     kodi.enable = true;
-    default = "kodi";
   };
 
   security.sudo = {
@@ -123,7 +130,6 @@
   # Define a user account. Don't forget to set a password with ‘passwd’.
   users.groups."k-ot" = { gid = 1000; };
   users.users."k-ot" = {
-    password = "k-ot";
     isNormalUser = true;
     uid = 1000;
     group = "k-ot";
@@ -133,23 +139,6 @@
     ];
   };
 
-  fileSystems."/mnt/storage" = {
-    #device = "storage-ng.hq.c3d2.de:/mnt/zroot/storage/rpool";
-    #device = "storage-ng.hq.c3d2.de:/c3d2/rpool";
-    device =
-      "172.22.99.13:6789,172.22.99.15:6789,172.22.99.16:6789:/c3d2/rpool";
-    fsType = "ceph";
-    options = [
-      "rw"
-      "relatime"
-      "name=public"
-      "secret=AQDgER1chJcMORAAK1ysRTN59B5x/MyniwVXFQ=="
-      "acl"
-      "wsize=16777216"
-      "_netdev"
-    ];
-  };
-
   users.users.emery.cryptHomeLuks = "/home/emery.luks.img";
 
   # This value determines the NixOS release with which your system is to be

hosts/pulsebert/configuration.nix

@@ -0,0 +1,154 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ config, pkgs, ... }:
+
+{
+  imports =
+    [ # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+    ];
+
+  boot.loader.grub.enable = false;
+  boot.loader.generic-extlinux-compatible.enable = false;
+  boot.loader.raspberryPi = { enable = true; version = 4; uboot.enable = false; };
+  #boot.kernelPackages = pkgs.linuxPackages_rpi4;
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+
+  boot.tmpOnTmpfs = true;
+  nix.buildCores = 4;
+  nix.maxJobs = 4;
+
+  networking.hostName = "pulsebert"; # Define your hostname.
+  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
+
+  # The global useDHCP flag is deprecated, therefore explicitly set to false here.
+  # Per-interface useDHCP will be mandatory in the future, so this generated config
+  # replicates the default behaviour.
+  networking.useDHCP = false;
+  networking.interfaces.eth0.useDHCP = true;
+  networking.interfaces.wlan0.useDHCP = true;
+
+  # Configure network proxy if necessary
+  # networking.proxy.default = "http://user:password@proxy:port/";
+  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+  # Select internationalisation properties.
+  # i18n.defaultLocale = "en_US.UTF-8";
+  # console = {
+  #   font = "Lat2-Terminus16";
+  #   keyMap = "us";
+  # };
+
+  # Set your time zone.
+  # time.timeZone = "Europe/Amsterdam";
+
+  # List packages installed in system profile. To search, run:
+  # $ nix search wget
+  environment.systemPackages = with pkgs; [
+    wget vim
+    raspberrypi-tools
+  ];
+
+  # Some programs need SUID wrappers, can be configured further or are
+  # started in user sessions.
+  # programs.mtr.enable = true;
+  # programs.gnupg.agent = {
+  #   enable = true;
+  #   enableSSHSupport = true;
+  #   pinentryFlavor = "gnome3";
+  # };
+
+  # List services that you want to enable:
+
+  # Enable the OpenSSH daemon.
+  services.openssh.enable = true;
+  services.openssh.permitRootLogin = "yes";
+  security.sudo = {
+    enable = true;
+    wheelNeedsPassword = false;
+  };
+
+  users.users.k-ot = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" ];
+  };
+
+
+  # Open ports in the firewall.
+  # networking.firewall.allowedTCPPorts = [ ... ];
+  # networking.firewall.allowedUDPPorts = [ ... ];
+  # Or disable the firewall altogether.
+  networking.firewall.enable = false;
+
+  # Enable CUPS to print documents.
+  # services.printing.enable = true;
+
+  # Enable sound.
+  sound.enable = true;
+  hardware.bluetooth = {
+    enable = true;
+    config = {
+      Policy.AutoEnable = true;
+      General = {
+        Enable = "Source,Sink,Media,Socket";
+        #DiscoverableTimeout = 0;
+        #Discoverable = true;
+      };
+    };
+  };
+  hardware.pulseaudio = {
+    enable = true;
+    systemWide = true;
+    tcp.enable = true;
+    tcp.anonymousClients.allowedIpRanges = [
+      "127.0.0.0/8" "::1/128"
+      "172.22.99.0/24" "2a02:8106:208:5201:58::/64"
+    ];
+    zeroconf.publish.enable = true;
+    package = pkgs.pulseaudioFull;
+    extraModules = [ pkgs.pulseaudio-modules-bt ];
+  };
+
+  # tell Avahi to publish CUPS and PulseAudio
+  services.avahi = {
+    enable = true;
+    publish.enable = true;
+    publish.userServices = true;
+  };
+
+  # Enable Audio streaming for Mac clients
+  services.shairport-sync.enable = true;
+
+  # DLNA
+  services.gnome3.rygel.enable = true;
+
+  # Enable the X11 windowing system.
+  # services.xserver.enable = true;
+  # services.xserver.layout = "us";
+  # services.xserver.xkbOptions = "eurosign:e";
+
+  # Enable touchpad support.
+  # services.xserver.libinput.enable = true;
+
+  # Enable the KDE Desktop Environment.
+  # services.xserver.displayManager.sddm.enable = true;
+  # services.xserver.desktopManager.plasma5.enable = true;
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  # users.users.jane = {
+  #   isNormalUser = true;
+  #   extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
+  # };
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "20.09"; # Did you read the comment?
+
+}
+

hosts/pulsebert/hardware-configuration.nix

@@ -0,0 +1,39 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  #imports =
+  #  [ (modulesPath + "/installer/scan/not-detected.nix")
+  #  ];
+
+  boot.initrd.availableKernelModules = [ "usbhid" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+  boot.kernelParams = [
+    "snd_bcm2835.enable_headphones=1"
+  ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-label/NIXOS_SD";
+      fsType = "ext4";
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-label/FIRMWARE";
+      fsType = "vfat";
+    };
+
+  swapDevices = [ ];
+
+  hardware.enableRedistributableFirmware = true;
+  #networking.wireless.enable = true;
+  boot.loader.raspberryPi.firmwareConfig = ''
+    gpu_mem=192
+    dtparam=audio=on
+  '';
+
+  powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
+}

krops.nix

@@ -32,4 +32,11 @@ in {
   ledstripes = deployContainer "ledstripes" "172.22.99.168";
   freifunk = deployContainer "freifunk" "172.20.72.40";
   kibana = deployContainer "kibana" "172.20.73.44";
+
+  glotzbert = pkgs.krops.writeDeploy "glotzbert" {
+    source = hostSource "glotzbert";
+    target = lib.mkTarget "k-ot@glotzbert.hq.c3d2.de" // {
+      sudo = true;
+    };
+  };
 }