makefu/1systems/darth.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

{ config, pkgs, lib, ... }:

with config.krebs.lib;
let
  byid = dev: "/dev/disk/by-id/" + dev;
  rootDisk = byid "ata-ADATA_SSD_S599_64GB_10460000000000000039";
  auxDisk = byid "ata-HGST_HTS721010A9E630_JR10006PH3A02F";
  dataPartition = auxDisk + "-part1";

  allDisks = [ rootDisk auxDisk ];
in {
  imports = [
      ../.
      ../2configs/fs/single-partition-ext4.nix
      ../2configs/zsh-user.nix
      ../2configs/smart-monitor.nix
      ../2configs/exim-retiolum.nix
      ../2configs/virtualization.nix
  ];

  networking.firewall.allowedUDPPorts = [ 80 655 67 ];
  networking.firewall.allowedTCPPorts = [ 80 655 ];
  networking.firewall.checkReversePath = false;
  #networking.firewall.enable = false;
  # virtualisation.nova.enableSingleNode = true;
  krebs.retiolum.enable = true;

  boot.kernelModules = [ "coretemp" "f71882fg" ];

  hardware.enableAllFirmware = true;
  nixpkgs.config.allowUnfree = true;
  networking.wireless.enable = true;

  # TODO smartd omo darth gum all-in-one
  services.smartd.devices = builtins.map (x: { device = x; }) allDisks;
  zramSwap.enable = true;

  fileSystems."/data" = {
    device = dataPartition;
    fsType = "ext4";
  };

  boot.loader.grub.device = rootDisk;

  users.users.root.openssh.authorizedKeys.keys = [
    config.krebs.users.makefu-omo.pubkey
    config.krebs.users.makefu-vbob.pubkey
  ];

  krebs.build.host = config.krebs.hosts.darth;
}