diff options
author | makefu <github@syntax-fehler.de> | 2016-11-27 15:25:25 +0100 |
---|---|---|
committer | makefu <github@syntax-fehler.de> | 2016-11-27 15:25:25 +0100 |
commit | 576f27096e0044e2da762ae9dfb0477e0fbace92 (patch) | |
tree | 0119c268846bc27126da6517616cc63e5c703ba5 | |
parent | 986728b8798765f874aef9998e620a6bfa74f169 (diff) |
m 1 sdev: init
-rw-r--r-- | 1systems/sdev.nix | 56 |
1 files changed, 56 insertions, 0 deletions
diff --git a/1systems/sdev.nix b/1systems/sdev.nix new file mode 100644 index 000000000..233f7cefa --- /dev/null +++ b/1systems/sdev.nix @@ -0,0 +1,56 @@ +{ lib, config, pkgs, ... }: +{ + krebs.build.host = config.krebs.hosts.sdev; + makefu.awesome.modkey = "Mod1"; + imports = + [ # Include the results of the hardware scan. + ../. + (toString <nixpkgs/nixos/modules/virtualisation/virtualbox-image.nix>) + (toString <nixpkgs/nixos/modules/virtualisation/virtualbox-guest.nix>) + ../2configs/main-laptop.nix #< base-gui + # <secrets/extra-hosts.nix> + + # environment + ../2configs/tinc/retiolum.nix + + ]; + # workaround for https://github.com/NixOS/nixpkgs/issues/16641 + services.xserver.videoDrivers = lib.mkOverride 45 [ "virtualbox" "modesetting" ]; + + nixpkgs.config.allowUnfree = true; + + # allow sdev to deploy self + users.extraUsers = { + root = { + openssh.authorizedKeys.keys = [ config.krebs.users.makefu-vbob.pubkey ]; + }; + }; + + environment.systemPackages = with pkgs;[ + ppp xclip + get + passwdqc-utils + docker + gnupg + populate + (pkgs.writeScriptBin "tor-browser" '' + #! /bin/sh + TOR_SKIP_LAUNCH=1 ${torbrowser}/bin/tor-browser + '') + ]; + + virtualisation.docker.enable = true; + + networking.firewall.allowedTCPPorts = [ + 25 + 80 + 8010 + ]; + + fileSystems."/media/share" = { + fsType = "vboxsf"; + device = "share"; + options = [ "rw" "uid=9001" "gid=9001" ]; + }; + +} |