117 lines
2.5 KiB
Nix
117 lines
2.5 KiB
Nix
{ config, lib, pkgs, inputs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
../server.nix
|
|
];
|
|
|
|
networking.hostId = "731d1660";
|
|
|
|
hardware = {
|
|
raspberry-pi."4" = {
|
|
apply-overlays-dtmerge.enable = true;
|
|
audio.enable = false;
|
|
fkms-3d.enable = false;
|
|
xhci.enable = false;
|
|
};
|
|
deviceTree = {
|
|
enable = true;
|
|
overlays = [
|
|
{ name = "hifiberry-digi-pro"; dtboFile = "${pkgs.device-tree_rpi.overlays}/hifiberry-digi-pro.dtbo"; }
|
|
];
|
|
};
|
|
firmware = with pkgs; [
|
|
firmwareLinuxNonfree
|
|
wireless-regdb
|
|
];
|
|
};
|
|
|
|
sound.enable = true;
|
|
|
|
age.secrets."passwords/networks.age" = {
|
|
file = "${inputs.secrets}/passwords/networks.age";
|
|
};
|
|
|
|
networking = {
|
|
wireless = {
|
|
enable = true;
|
|
interfaces = [ "wlan0" ];
|
|
environmentFile = config.age.secrets."passwords/networks.age".path;
|
|
networks = {
|
|
"Apollo 600 Mbps".psk = "@PSK_APOLLO@";
|
|
};
|
|
};
|
|
};
|
|
|
|
security.rtkit.enable = true;
|
|
services.pipewire = {
|
|
enable = true;
|
|
alsa.enable = true;
|
|
alsa.support32Bit = true;
|
|
pulse.enable = true;
|
|
systemWide = true;
|
|
};
|
|
|
|
services.mosquitto = {
|
|
enable = true;
|
|
listeners = [{
|
|
port = 1883;
|
|
settings = {
|
|
allow_anonymous = true;
|
|
};
|
|
}];
|
|
};
|
|
|
|
services.zigbee2mqtt = {
|
|
enable = true;
|
|
settings = {
|
|
homeassistant = config.services.home-assistant.enable;
|
|
frontend = true;
|
|
serial = {
|
|
port = "/dev/ttyUSB0";
|
|
};
|
|
mqtt = {
|
|
server = "mqtt://localhost:1883";
|
|
};
|
|
};
|
|
};
|
|
|
|
age.secrets."passwords/services/borg/pi-passphrase" = {
|
|
file = "${inputs.secrets}/passwords/services/borg/pi-passphrase.age";
|
|
};
|
|
|
|
services.borgmatic = {
|
|
enable = true;
|
|
settings = {
|
|
source_directories = [
|
|
"/var/lib/mosquitto"
|
|
"/var/lib/zigbee2mqtt"
|
|
];
|
|
repositories = [
|
|
{ label = "borgbase"; path = "ssh://qcw86s11@qcw86s11.repo.borgbase.com/./repo"; }
|
|
];
|
|
storage = {
|
|
encryption_passcommand = "cat ${config.age.secrets."passwords/services/borg/pi-passphrase".path}";
|
|
ssh_command = "ssh -i /etc/ssh/ssh_host_ed25519_key";
|
|
};
|
|
retention = {
|
|
keep_daily = 7;
|
|
keep_weekly = 4;
|
|
keep_monthly = 6;
|
|
};
|
|
};
|
|
};
|
|
|
|
# Without this override, `cat` is unavailable for `encryption_passcommand`
|
|
systemd.services.borgmatic.confinement.fullUnit = true;
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
libraspberrypi
|
|
raspberrypi-eeprom
|
|
];
|
|
|
|
system.stateVersion = "22.11";
|
|
}
|
|
|