+2 -2

flake.nix

reviewed

··· 1 1 { 2 2 inputs = { 3 3 nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable"; 4 4 + nixos-hardware.url = "github:NixOS/nixos-hardware"; 4 5 disko = { 5 6 url = "github:nix-community/disko"; 6 7 inputs.nixpkgs.follows = "nixpkgs"; ··· 19 20 nixosConfigurations.polecat = nixpkgs.lib.nixosSystem { 20 21 system = "x86_64-linux"; 21 22 modules = [ 22 22 - ./hosts/polecat/configuration.nix 23 23 - ./hosts/polecat/hardware-configuration.nix 23 23 + ./hosts/polecat 24 24 ]; 25 25 }; 26 26 };

+7

hosts/polecat/default.nix

reviewed

··· 1 1 + { pkgs, ...}: 2 2 + { 3 3 + imports = [ 4 4 + ./configuration.nix 5 5 + ./hardware-configuration.nix 6 6 + ]; 7 7 + }

+4 -8

hosts/polecat/hardware-configuration.nix

reviewed

··· 1 1 - { config, lib, pkgs, modulesPath, ... }: 1 1 + { config, lib, pkgs, modulesPath, inputs, ... }: 2 2 3 3 { 4 4 imports = 5 5 [ 6 6 (modulesPath + "/installer/scan/not-detected.nix") 7 7 + # inputs.nixos-hardware.nixosModules.common-cpu-intel 8 8 + # inputs.nixos-hardware.nixosModules.common-pc 9 9 + # inputs.nixos-hardware.nixosModules.common-ssd 7 10 ]; 8 11 9 12 boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ]; ··· 26 29 [ 27 30 { device = "/dev/disk/by-uuid/2628cae1-0fdc-4ff4-a4ef-99ade79dbb4b"; } 28 31 ]; 29 29 - 30 30 - # Enables DHCP on each ethernet and wireless interface. In case of scripted networking 31 31 - # (the default) this is the recommended approach. When using systemd-networkd it's 32 32 - # still possible to use this option, but it's recommended to use it in conjunction 33 33 - # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`. 34 34 - networking.useDHCP = lib.mkDefault true; 35 35 - # networking.interfaces.enp1s0.useDHCP = lib.mkDefault true; 36 32 37 33 nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; 38 34 hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;

+6

modules/nixos/server/postgresql.nix

reviewed

··· 1 1 + { pkgs, config, ... }: 2 2 + 3 3 + { 4 4 + services.postgresql.enable = true; 5 5 + services.postgresqlBackup.enable = true; 6 6 + }

+13

secrets/secrets.nix

reviewed

··· 1 1 + let 2 2 + alex = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIB2KyeFk+PFSBQ2c9fZSP/3kngks5qzfJJb6PRgTmhb alex@otter.foo"; 3 3 + users = [ alex ]; 4 4 + 5 5 + ferret = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHrRb1KbZH7OtuHi9VOONdofjm5vZ80S+9aOufbGXXK9"; # scanned from host 6 6 + polecat = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHlPTLa9vkBCDuHw+z0YnTI6WGqDganOLPqSE3Lt4pwx"; # scanned from host 7 7 + systems = [ ferret polecat ]; 8 8 + in 9 9 + { 10 10 + "caddy.age".publicKeys = [ alex ferret ]; 11 11 + "paperless-password.age".publicKeys = [ alex ferret ]; 12 12 + "miniflux-creds.age".publicKeys = [ alex ferret ]; 13 13 + }