reorganise

system/zenix/hardware.nix

@@ -0,0 +1,48 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/2dad5ed6-44cc-4d9d-9392-32afaa7b3909";
+      fsType = "btrfs";
+      options = [ "subvol=@" "compress=zstd" "autodefrag" ];
+    };
+
+  boot.initrd.luks.devices."cryptroot".device = "/dev/disk/by-uuid/cc0617df-8cbf-4618-abbc-df64c96de151";
+
+  fileSystems."/home" =
+    { device = "/dev/disk/by-uuid/2dad5ed6-44cc-4d9d-9392-32afaa7b3909";
+      fsType = "btrfs";
+      options = [ "subvol=@home" "compress=zstd" "autodefrag" ];
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/FE7E-0DE3";
+      fsType = "vfat";
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/da57b489-ab77-4830-b710-9f96cf43d053"; }
+    ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp5s0.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

system/zenix/system.nix

@@ -0,0 +1,23 @@
+# https://search.nixos.org/options
+
+{ config, pkgs, ... }:
+{
+
+  networking.hostName = "zenix";
+
+  services.xserver = {
+    layout = "gb";
+    xkbOptions = "caps:escape";
+  };
+
+  services.openssh.enable = true;
+
+  services.tailscale.enable = true;
+  networking.firewall.checkReversePath = "loose";
+
+  networking.firewall.allowedTCPPorts = [ ];
+
+  system.stateVersion = "22.11"; # do not change
+
+}
+