1e2e2bdd35
grep -- '- &' .sops.yaml | cut -d'&' -f2 | grep _host | sed 's/_host//' | xargs -n2 clan secrets machines add
for i in secrets/*.yaml; do host=$(basename $i .yaml); clan secrets import-sops $i --machine $host --user makefu --prefix ${host}-;done
for i in secrets/*.yaml; do host=$(basename $i .yaml) ;clan secrets groups add-machine common "$host";done
41 lines
1.2 KiB
Nix
41 lines
1.2 KiB
Nix
# Edit this configuration file to define what should be installed on
|
||
# your system. Help is available in the configuration.nix(5) man page
|
||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||
|
||
{ config, pkgs, ... }:
|
||
|
||
{
|
||
imports =
|
||
[ # Include the results of the hardware scan.
|
||
<stockholm/makefu>
|
||
<nixpkgs/nixos/modules/profiles/qemu-guest.nix>
|
||
<stockholm/makefu/2configs/git/cgit-retiolum.nix>
|
||
<stockholm/makefu/2configs/tinc/retiolum.nix>
|
||
];
|
||
krebs.build.host = config.krebs.hosts.repunit;
|
||
|
||
boot.loader.grub.enable = true;
|
||
boot.loader.grub.version = 2;
|
||
boot.loader.grub.device = "/dev/vda";
|
||
|
||
boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "ehci_pci" "virtio_pci" "virtio_blk" ];
|
||
boot.kernelModules = [ ];
|
||
boot.extraModulePackages = [ ];
|
||
hardware.enableRedistributableFirmware = true;
|
||
hardware.cpu.amd.updateMicrocode = true;
|
||
|
||
# networking.firewall is enabled by default
|
||
networking.firewall.allowedTCPPorts = [ 80 ];
|
||
networking.firewall.allowPing = true;
|
||
|
||
fileSystems."/" =
|
||
{ device = "/dev/disk/by-label/nixos";
|
||
fsType = "ext4";
|
||
};
|
||
|
||
# $ nix-env -qaP | grep wget
|
||
environment.systemPackages = with pkgs; [
|
||
jq
|
||
];
|
||
}
|