aboutsummaryrefslogtreecommitdiff
path: root/machines
diff options
context:
space:
mode:
Diffstat (limited to 'machines')
-rw-r--r--machines/nixos/x86_64-linux/do-rproxy.nix20
-rw-r--r--machines/nixos/x86_64-linux/rivendell.nix25
-rw-r--r--machines/nixos/x86_64-linux/synology-vm.nix34
3 files changed, 21 insertions, 58 deletions
diff --git a/machines/nixos/x86_64-linux/do-rproxy.nix b/machines/nixos/x86_64-linux/do-rproxy.nix
index bac3885..dd20df3 100644
--- a/machines/nixos/x86_64-linux/do-rproxy.nix
+++ b/machines/nixos/x86_64-linux/do-rproxy.nix
@@ -3,11 +3,19 @@
lib,
pkgs,
config,
- modulesPath,
adminUser,
...
}:
{
+ imports = [
+ ../../../profiles/cgroups.nix
+ ../../../profiles/defaults.nix
+ ../../../profiles/disk/basic-vm.nix
+ ../../../profiles/hardware/do-droplet.nix
+ ../../../profiles/home-manager.nix
+ ../../../profiles/server.nix
+ ];
+
age = {
secrets = {
cloudflare-nginx = {
@@ -19,14 +27,6 @@
};
};
- imports = [
- (modulesPath + "/virtualisation/digital-ocean-config.nix")
- ../../../profiles/disk/basic-vm.nix
- ../../../profiles/defaults.nix
- ../../../profiles/server.nix
- ../../../profiles/cgroups.nix
- ];
-
disko.devices.disk.disk1.device = "/dev/vda";
networking.hostName = "do-rproxy";
@@ -57,8 +57,6 @@
networking.firewall.trustedInterfaces = [ "wg0" ];
networking.firewall.allowedUDPPorts = [ 51871 ];
- my.modules.hardware.do-droplet.enable = true;
-
system.stateVersion = "25.05"; # Did you read the comment?
networking.firewall.allowedTCPPorts = [
diff --git a/machines/nixos/x86_64-linux/rivendell.nix b/machines/nixos/x86_64-linux/rivendell.nix
index 969133c..90fbce3 100644
--- a/machines/nixos/x86_64-linux/rivendell.nix
+++ b/machines/nixos/x86_64-linux/rivendell.nix
@@ -1,19 +1,17 @@
{
lib,
config,
- modulesPath,
- inputs,
adminUser,
...
}:
{
imports = [
- (modulesPath + "/installer/scan/not-detected.nix")
- inputs.nixos-hardware.nixosModules.framework-desktop-amd-ai-max-300-series
- ../../../profiles/disk/btrfs-on-luks.nix
../../../profiles/cgroups.nix
../../../profiles/defaults.nix
+ ../../../profiles/disk/btrfs-on-luks.nix
../../../profiles/forgejo.nix
+ ../../../profiles/hardware/framework-desktop.nix
+ ../../../profiles/home-manager.nix
../../../profiles/keycloak.nix
../../../profiles/remote-unlock.nix
../../../profiles/server.nix
@@ -31,21 +29,7 @@
};
};
- boot.initrd.availableKernelModules = [
- "nvme"
- "xhci_pci"
- "thunderbolt"
- "usbhid"
- "usb_storage"
- "sd_mod"
- "r8169" # ethernet driver
- ];
- boot.initrd.kernelModules = [ ];
- boot.kernelModules = [ "kvm-amd" ];
- boot.extraModulePackages = [ ];
-
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
- hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
networking.hostName = "rivendell";
networking.useDHCP = lib.mkDefault true;
@@ -95,13 +79,12 @@
];
};
- my.modules.hardware.baremetal.enable = true;
-
home-manager = {
users.${adminUser.name} = {
imports = [
../../../home/profiles/minimal.nix
];
+ inherit (adminUser) userinfo;
};
};
diff --git a/machines/nixos/x86_64-linux/synology-vm.nix b/machines/nixos/x86_64-linux/synology-vm.nix
index 0ffe222..1b9b7e7 100644
--- a/machines/nixos/x86_64-linux/synology-vm.nix
+++ b/machines/nixos/x86_64-linux/synology-vm.nix
@@ -1,11 +1,18 @@
{
- modulesPath,
lib,
adminUser,
config,
...
}:
{
+ imports = [
+ ../../../profiles/cgroups.nix
+ ../../../profiles/defaults.nix
+ ../../../profiles/disk/basic-vm.nix
+ ../../../profiles/home-manager.nix
+ ../../../profiles/server.nix
+ ];
+
age = {
secrets = {
restic_gcs_credentials = {
@@ -23,31 +30,6 @@
};
};
- imports = [
- (modulesPath + "/profiles/qemu-guest.nix")
- (modulesPath + "/installer/scan/not-detected.nix")
- ../../../profiles/defaults.nix
- ../../../profiles/server.nix
- ../../../profiles/cgroups.nix
- ../../../profiles/disk/basic-vm.nix
- ];
-
- boot.initrd.availableKernelModules = [
- "ata_piix"
- "uhci_hcd"
- "virtio_pci"
- "virtio_scsi"
- "sd_mod"
- "sr_mod"
- ];
- boot.initrd.kernelModules = [ ];
- boot.kernelModules = [ "kvm-amd" ];
- boot.extraModulePackages = [ ];
-
- swapDevices = [ ];
-
- nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-
boot.loader.efi.canTouchEfiVariables = true;
boot.loader.systemd-boot.enable = true;