Compare commits
3 Commits
7cd1def1d6
...
48c5920708
Author | SHA1 | Date | |
---|---|---|---|
48c5920708 | |||
a376aaad01 | |||
f8e232b2e4 |
|
@ -7,40 +7,47 @@
|
||||||
users.k-ot = true;
|
users.k-ot = true;
|
||||||
isInHq = true;
|
isInHq = true;
|
||||||
hq.interface = "eno1";
|
hq.interface = "eno1";
|
||||||
|
hq.enableBinaryCache = false;
|
||||||
enableHail = false;
|
enableHail = false;
|
||||||
};
|
};
|
||||||
|
|
||||||
nixpkgs.config.allowUnfree = true;
|
nixpkgs.config.allowUnfree = true;
|
||||||
nix = {
|
nix = {
|
||||||
useSandbox = true;
|
useSandbox = true;
|
||||||
buildCores = 2;
|
buildCores = 4;
|
||||||
|
maxJobs = 4;
|
||||||
};
|
};
|
||||||
|
|
||||||
# Use the systemd-boot EFI boot loader.
|
# Use the systemd-boot EFI boot loader.
|
||||||
boot.loader.systemd-boot.enable = true;
|
boot.loader.systemd-boot.enable = true;
|
||||||
boot.loader.efi.canTouchEfiVariables = true;
|
boot.loader.efi.canTouchEfiVariables = true;
|
||||||
boot.kernelPackages = pkgs.linuxPackages_4_19;
|
boot.kernelPackages = pkgs.linuxPackages_latest;
|
||||||
|
|
||||||
networking.hostName = "glotzbert"; # Define your hostname.
|
networking.hostName = "glotzbert"; # Define your hostname.
|
||||||
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||||||
|
networking.interfaces.eno1.useDHCP = true;
|
||||||
|
|
||||||
# Configure network proxy if necessary
|
# Configure network proxy if necessary
|
||||||
# networking.proxy.default = "http://user:password@proxy:port/";
|
# networking.proxy.default = "http://user:password@proxy:port/";
|
||||||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||||||
|
|
||||||
# Select internationalisation properties.
|
# Select internationalisation properties.
|
||||||
i18n = {
|
console = {
|
||||||
consoleFont = "${pkgs.terminus_font}/share/consolefonts/ter-u28n.psf.gz";
|
font = "${pkgs.terminus_font}/share/consolefonts/ter-u28n.psf.gz";
|
||||||
consoleKeyMap = "us";
|
keyMap = "de";
|
||||||
defaultLocale = "en_US.UTF-8";
|
|
||||||
};
|
};
|
||||||
|
i18n.defaultLocale = "en_US.UTF-8";
|
||||||
|
|
||||||
# Set your time zone.
|
# Set your time zone.
|
||||||
time.timeZone = "Europe/Berlin";
|
time.timeZone = "Europe/Berlin";
|
||||||
|
|
||||||
# List packages installed in system profile. To search, run:
|
# List packages installed in system profile. To search, run:
|
||||||
# $ nix search wget
|
# $ nix search wget
|
||||||
environment.systemPackages = with pkgs; [ wget vim x11vnc ];
|
environment.systemPackages = with pkgs; [
|
||||||
|
wget vim git tmux screen
|
||||||
|
chromium firefox
|
||||||
|
mpv kodi
|
||||||
|
];
|
||||||
|
|
||||||
systemd.user.services.x11vnc = {
|
systemd.user.services.x11vnc = {
|
||||||
description = "X11 VNC server";
|
description = "X11 VNC server";
|
||||||
|
@ -108,11 +115,11 @@
|
||||||
user = "k-ot";
|
user = "k-ot";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
defaultSession = "gnome-xorg";
|
||||||
};
|
};
|
||||||
services.xserver.desktopManager = {
|
services.xserver.desktopManager = {
|
||||||
gnome3.enable = true;
|
gnome3.enable = true;
|
||||||
kodi.enable = true;
|
kodi.enable = true;
|
||||||
default = "kodi";
|
|
||||||
};
|
};
|
||||||
|
|
||||||
security.sudo = {
|
security.sudo = {
|
||||||
|
@ -123,7 +130,6 @@
|
||||||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||||||
users.groups."k-ot" = { gid = 1000; };
|
users.groups."k-ot" = { gid = 1000; };
|
||||||
users.users."k-ot" = {
|
users.users."k-ot" = {
|
||||||
password = "k-ot";
|
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
uid = 1000;
|
uid = 1000;
|
||||||
group = "k-ot";
|
group = "k-ot";
|
||||||
|
@ -133,23 +139,6 @@
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
fileSystems."/mnt/storage" = {
|
|
||||||
#device = "storage-ng.hq.c3d2.de:/mnt/zroot/storage/rpool";
|
|
||||||
#device = "storage-ng.hq.c3d2.de:/c3d2/rpool";
|
|
||||||
device =
|
|
||||||
"172.22.99.13:6789,172.22.99.15:6789,172.22.99.16:6789:/c3d2/rpool";
|
|
||||||
fsType = "ceph";
|
|
||||||
options = [
|
|
||||||
"rw"
|
|
||||||
"relatime"
|
|
||||||
"name=public"
|
|
||||||
"secret=AQDgER1chJcMORAAK1ysRTN59B5x/MyniwVXFQ=="
|
|
||||||
"acl"
|
|
||||||
"wsize=16777216"
|
|
||||||
"_netdev"
|
|
||||||
];
|
|
||||||
};
|
|
||||||
|
|
||||||
users.users.emery.cryptHomeLuks = "/home/emery.luks.img";
|
users.users.emery.cryptHomeLuks = "/home/emery.luks.img";
|
||||||
|
|
||||||
# This value determines the NixOS release with which your system is to be
|
# This value determines the NixOS release with which your system is to be
|
||||||
|
|
154
hosts/pulsebert/configuration.nix
Normal file
154
hosts/pulsebert/configuration.nix
Normal file
|
@ -0,0 +1,154 @@
|
||||||
|
# Edit this configuration file to define what should be installed on
|
||||||
|
# your system. Help is available in the configuration.nix(5) man page
|
||||||
|
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||||||
|
|
||||||
|
{ config, pkgs, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
imports =
|
||||||
|
[ # Include the results of the hardware scan.
|
||||||
|
./hardware-configuration.nix
|
||||||
|
];
|
||||||
|
|
||||||
|
boot.loader.grub.enable = false;
|
||||||
|
boot.loader.generic-extlinux-compatible.enable = false;
|
||||||
|
boot.loader.raspberryPi = { enable = true; version = 4; uboot.enable = false; };
|
||||||
|
#boot.kernelPackages = pkgs.linuxPackages_rpi4;
|
||||||
|
boot.kernelPackages = pkgs.linuxPackages_latest;
|
||||||
|
|
||||||
|
boot.tmpOnTmpfs = true;
|
||||||
|
nix.buildCores = 4;
|
||||||
|
nix.maxJobs = 4;
|
||||||
|
|
||||||
|
networking.hostName = "pulsebert"; # Define your hostname.
|
||||||
|
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||||||
|
|
||||||
|
# The global useDHCP flag is deprecated, therefore explicitly set to false here.
|
||||||
|
# Per-interface useDHCP will be mandatory in the future, so this generated config
|
||||||
|
# replicates the default behaviour.
|
||||||
|
networking.useDHCP = false;
|
||||||
|
networking.interfaces.eth0.useDHCP = true;
|
||||||
|
networking.interfaces.wlan0.useDHCP = true;
|
||||||
|
|
||||||
|
# Configure network proxy if necessary
|
||||||
|
# networking.proxy.default = "http://user:password@proxy:port/";
|
||||||
|
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||||||
|
|
||||||
|
# Select internationalisation properties.
|
||||||
|
# i18n.defaultLocale = "en_US.UTF-8";
|
||||||
|
# console = {
|
||||||
|
# font = "Lat2-Terminus16";
|
||||||
|
# keyMap = "us";
|
||||||
|
# };
|
||||||
|
|
||||||
|
# Set your time zone.
|
||||||
|
# time.timeZone = "Europe/Amsterdam";
|
||||||
|
|
||||||
|
# List packages installed in system profile. To search, run:
|
||||||
|
# $ nix search wget
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
wget vim
|
||||||
|
raspberrypi-tools
|
||||||
|
];
|
||||||
|
|
||||||
|
# Some programs need SUID wrappers, can be configured further or are
|
||||||
|
# started in user sessions.
|
||||||
|
# programs.mtr.enable = true;
|
||||||
|
# programs.gnupg.agent = {
|
||||||
|
# enable = true;
|
||||||
|
# enableSSHSupport = true;
|
||||||
|
# pinentryFlavor = "gnome3";
|
||||||
|
# };
|
||||||
|
|
||||||
|
# List services that you want to enable:
|
||||||
|
|
||||||
|
# Enable the OpenSSH daemon.
|
||||||
|
services.openssh.enable = true;
|
||||||
|
services.openssh.permitRootLogin = "yes";
|
||||||
|
security.sudo = {
|
||||||
|
enable = true;
|
||||||
|
wheelNeedsPassword = false;
|
||||||
|
};
|
||||||
|
|
||||||
|
users.users.k-ot = {
|
||||||
|
isNormalUser = true;
|
||||||
|
extraGroups = [ "wheel" ];
|
||||||
|
};
|
||||||
|
|
||||||
|
|
||||||
|
# Open ports in the firewall.
|
||||||
|
# networking.firewall.allowedTCPPorts = [ ... ];
|
||||||
|
# networking.firewall.allowedUDPPorts = [ ... ];
|
||||||
|
# Or disable the firewall altogether.
|
||||||
|
networking.firewall.enable = false;
|
||||||
|
|
||||||
|
# Enable CUPS to print documents.
|
||||||
|
# services.printing.enable = true;
|
||||||
|
|
||||||
|
# Enable sound.
|
||||||
|
sound.enable = true;
|
||||||
|
hardware.bluetooth = {
|
||||||
|
enable = true;
|
||||||
|
config = {
|
||||||
|
Policy.AutoEnable = true;
|
||||||
|
General = {
|
||||||
|
Enable = "Source,Sink,Media,Socket";
|
||||||
|
#DiscoverableTimeout = 0;
|
||||||
|
#Discoverable = true;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
hardware.pulseaudio = {
|
||||||
|
enable = true;
|
||||||
|
systemWide = true;
|
||||||
|
tcp.enable = true;
|
||||||
|
tcp.anonymousClients.allowedIpRanges = [
|
||||||
|
"127.0.0.0/8" "::1/128"
|
||||||
|
"172.22.99.0/24" "2a02:8106:208:5201:58::/64"
|
||||||
|
];
|
||||||
|
zeroconf.publish.enable = true;
|
||||||
|
package = pkgs.pulseaudioFull;
|
||||||
|
extraModules = [ pkgs.pulseaudio-modules-bt ];
|
||||||
|
};
|
||||||
|
|
||||||
|
# tell Avahi to publish CUPS and PulseAudio
|
||||||
|
services.avahi = {
|
||||||
|
enable = true;
|
||||||
|
publish.enable = true;
|
||||||
|
publish.userServices = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
# Enable Audio streaming for Mac clients
|
||||||
|
services.shairport-sync.enable = true;
|
||||||
|
|
||||||
|
# DLNA
|
||||||
|
services.gnome3.rygel.enable = true;
|
||||||
|
|
||||||
|
# Enable the X11 windowing system.
|
||||||
|
# services.xserver.enable = true;
|
||||||
|
# services.xserver.layout = "us";
|
||||||
|
# services.xserver.xkbOptions = "eurosign:e";
|
||||||
|
|
||||||
|
# Enable touchpad support.
|
||||||
|
# services.xserver.libinput.enable = true;
|
||||||
|
|
||||||
|
# Enable the KDE Desktop Environment.
|
||||||
|
# services.xserver.displayManager.sddm.enable = true;
|
||||||
|
# services.xserver.desktopManager.plasma5.enable = true;
|
||||||
|
|
||||||
|
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||||||
|
# users.users.jane = {
|
||||||
|
# isNormalUser = true;
|
||||||
|
# extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
|
||||||
|
# };
|
||||||
|
|
||||||
|
# This value determines the NixOS release from which the default
|
||||||
|
# settings for stateful data, like file locations and database versions
|
||||||
|
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||||||
|
# this value at the release version of the first install of this system.
|
||||||
|
# Before changing this value read the documentation for this option
|
||||||
|
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||||||
|
system.stateVersion = "20.09"; # Did you read the comment?
|
||||||
|
|
||||||
|
}
|
||||||
|
|
39
hosts/pulsebert/hardware-configuration.nix
Normal file
39
hosts/pulsebert/hardware-configuration.nix
Normal file
|
@ -0,0 +1,39 @@
|
||||||
|
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||||
|
# and may be overwritten by future invocations. Please make changes
|
||||||
|
# to /etc/nixos/configuration.nix instead.
|
||||||
|
{ config, lib, pkgs, modulesPath, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
#imports =
|
||||||
|
# [ (modulesPath + "/installer/scan/not-detected.nix")
|
||||||
|
# ];
|
||||||
|
|
||||||
|
boot.initrd.availableKernelModules = [ "usbhid" ];
|
||||||
|
boot.initrd.kernelModules = [ ];
|
||||||
|
boot.kernelModules = [ ];
|
||||||
|
boot.extraModulePackages = [ ];
|
||||||
|
boot.kernelParams = [
|
||||||
|
"snd_bcm2835.enable_headphones=1"
|
||||||
|
];
|
||||||
|
|
||||||
|
fileSystems."/" =
|
||||||
|
{ device = "/dev/disk/by-label/NIXOS_SD";
|
||||||
|
fsType = "ext4";
|
||||||
|
};
|
||||||
|
|
||||||
|
fileSystems."/boot" =
|
||||||
|
{ device = "/dev/disk/by-label/FIRMWARE";
|
||||||
|
fsType = "vfat";
|
||||||
|
};
|
||||||
|
|
||||||
|
swapDevices = [ ];
|
||||||
|
|
||||||
|
hardware.enableRedistributableFirmware = true;
|
||||||
|
#networking.wireless.enable = true;
|
||||||
|
boot.loader.raspberryPi.firmwareConfig = ''
|
||||||
|
gpu_mem=192
|
||||||
|
dtparam=audio=on
|
||||||
|
'';
|
||||||
|
|
||||||
|
powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
|
||||||
|
}
|
|
@ -32,4 +32,11 @@ in {
|
||||||
ledstripes = deployContainer "ledstripes" "172.22.99.168";
|
ledstripes = deployContainer "ledstripes" "172.22.99.168";
|
||||||
freifunk = deployContainer "freifunk" "172.20.72.40";
|
freifunk = deployContainer "freifunk" "172.20.72.40";
|
||||||
kibana = deployContainer "kibana" "172.20.73.44";
|
kibana = deployContainer "kibana" "172.20.73.44";
|
||||||
|
|
||||||
|
glotzbert = pkgs.krops.writeDeploy "glotzbert" {
|
||||||
|
source = hostSource "glotzbert";
|
||||||
|
target = lib.mkTarget "k-ot@glotzbert.hq.c3d2.de" // {
|
||||||
|
sudo = true;
|
||||||
|
};
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue
Block a user