116 lines
2.6 KiB
Nix
116 lines
2.6 KiB
Nix
{ config, lib, pkgs, inputs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
./audio.nix
|
|
../desktop.nix
|
|
];
|
|
|
|
boot.loader.systemd-boot = {
|
|
enable = true;
|
|
graceful = true;
|
|
netbootxyz.enable = true;
|
|
};
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
|
|
networking.hostName = "odyssey";
|
|
networking.hostId = "c5e68d78";
|
|
networking.networkmanager.enable = true;
|
|
|
|
nix.package = pkgs.nixFlakes;
|
|
nix.extraOptions = ''
|
|
experimental-features = nix-command flakes
|
|
'';
|
|
|
|
virtualisation.libvirtd.enable = true;
|
|
virtualisation.lxd.enable = true;
|
|
# Work around https://github.com/NixOS/nixpkgs/issues/263359
|
|
networking.firewall.trustedInterfaces = [ "lxdbr0" "virbr0" ];
|
|
|
|
users.defaultUserShell = pkgs.zsh;
|
|
|
|
system.stateVersion = "22.11";
|
|
|
|
services.journald.extraConfig = ''
|
|
SystemMaxUse=4G
|
|
MaxRetentionSec=90day
|
|
'';
|
|
|
|
services.nix-serve = {
|
|
enable = true;
|
|
secretKeyFile = "/var/cache-priv-key.pem";
|
|
};
|
|
|
|
services.nginx = {
|
|
enable = true;
|
|
recommendedProxySettings = true;
|
|
virtualHosts = {
|
|
"odyssey.mesh.vimium.net" = {
|
|
locations."/".proxyPass = "http://${config.services.nix-serve.bindAddress}:${toString config.services.nix-serve.port}";
|
|
};
|
|
};
|
|
};
|
|
|
|
age.secrets."odyssey-passphrase" = {
|
|
file = "${inputs.secrets}/passwords/services/borg/odyssey-passphrase.age";
|
|
};
|
|
|
|
services.borgmatic = {
|
|
enable = true;
|
|
settings = {
|
|
source_directories = [
|
|
"/home/jordan/Documents"
|
|
];
|
|
repositories = [
|
|
{ label = "borgbase"; path = "ssh://iqwu22oq@iqwu22oq.repo.borgbase.com/./repo"; }
|
|
];
|
|
storage = {
|
|
encryption_passcommand = "cat ${config.age.secrets.odyssey-passphrase.path}";
|
|
ssh_command = "ssh -i /etc/ssh/ssh_host_ed25519_key";
|
|
};
|
|
retention = {
|
|
keep_daily = 7;
|
|
keep_weekly = 4;
|
|
keep_monthly = 6;
|
|
};
|
|
};
|
|
};
|
|
|
|
# Without this override, `cat` is unavailable for `encryption_passcommand`
|
|
systemd.services.borgmatic.confinement.fullUnit = true;
|
|
|
|
modules = {
|
|
desktop = {
|
|
apps.qbittorrent.enable = true;
|
|
browsers = {
|
|
firefox.enable = true;
|
|
};
|
|
media.graphics = {
|
|
modeling.enable = true;
|
|
raster.enable = true;
|
|
vector.enable = true;
|
|
};
|
|
media.recording = {
|
|
audio.enable = true;
|
|
video.enable = true;
|
|
};
|
|
};
|
|
dev = {
|
|
node.enable = true;
|
|
};
|
|
editors = {
|
|
neovim.enable = true;
|
|
vscode.enable = true;
|
|
};
|
|
security = {
|
|
gpg.enable = true;
|
|
pass.enable = true;
|
|
};
|
|
shell = {
|
|
git.enable = true;
|
|
zsh.enable = true;
|
|
};
|
|
};
|
|
}
|