Tristan
123e7088f5
- updates - snapserver - graphana dashboards - loki - ddclient - arr suite, jellyseer - mautrix fixes
87 lines
2.5 KiB
Nix
87 lines
2.5 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
modulesPath,
|
|
...
|
|
}: let
|
|
user = config.user;
|
|
decrypt = import ../lib/decrypt.nix;
|
|
in {
|
|
imports = [
|
|
(modulesPath + "/installer/scan/not-detected.nix")
|
|
./ddc.nix
|
|
./g920.nix
|
|
];
|
|
|
|
boot.initrd.availableKernelModules = ["nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod"];
|
|
boot.initrd.kernelModules = ["uas" "usbcore" "usb_storage" "vfat" "nls_cp437" "nls_iso8859_1"];
|
|
boot.kernelModules = ["kvm-amd"];
|
|
boot.extraModulePackages = [];
|
|
|
|
fileSystems."/" = {
|
|
device = "/dev/disk/by-uuid/2dad5ed6-44cc-4d9d-9392-32afaa7b3909";
|
|
fsType = "btrfs";
|
|
options = ["subvol=@" "compress=zstd" "autodefrag"];
|
|
};
|
|
|
|
fileSystems."/nix" = {
|
|
device = "/dev/disk/by-label/nix";
|
|
fsType = "f2fs";
|
|
neededForBoot = true;
|
|
options = ["noatime"];
|
|
};
|
|
|
|
boot.initrd.postDeviceCommands = pkgs.lib.mkBefore (decrypt {
|
|
keydevice = "/dev/disk/by-id/usb-Generic_Flash_Disk_BCC97785-0:0";
|
|
keypartname = "usbkey";
|
|
});
|
|
|
|
boot.initrd.luks.devices."cryptroot" = {
|
|
device = "/dev/disk/by-uuid/cc0617df-8cbf-4618-abbc-df64c96de151";
|
|
keyFileSize = 4096;
|
|
keyFile = "/key/keyfile";
|
|
preLVM = false;
|
|
};
|
|
|
|
fileSystems."/home" = {
|
|
device = "/dev/disk/by-uuid/2dad5ed6-44cc-4d9d-9392-32afaa7b3909";
|
|
fsType = "btrfs";
|
|
options = ["subvol=@home" "compress=zstd" "autodefrag"];
|
|
};
|
|
|
|
fileSystems."/boot" = {
|
|
device = "/dev/disk/by-uuid/FE7E-0DE3";
|
|
fsType = "vfat";
|
|
};
|
|
|
|
swapDevices = [{device = "/dev/disk/by-uuid/da57b489-ab77-4830-b710-9f96cf43d053";}];
|
|
|
|
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
|
# (the default) this is the recommended approach. When using systemd-networkd it's
|
|
# still possible to use this option, but it's recommended to use it in conjunction
|
|
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
|
|
networking.useDHCP = lib.mkDefault true;
|
|
# networking.interfaces.enp5s0.useDHCP = lib.mkDefault true;
|
|
|
|
networking.networkmanager.insertNameservers = ["1.1.1.1" "1.0.0.1"];
|
|
|
|
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
|
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
|
|
|
hardware.keyboard.zsa.enable = true;
|
|
|
|
networking.hostName = "zenix";
|
|
|
|
services.openssh.enable = true;
|
|
|
|
networking.firewall.checkReversePath = "loose";
|
|
|
|
system.stateVersion = "22.11"; # do not change
|
|
|
|
home-manager.users.${user}.imports = [
|
|
{
|
|
home.stateVersion = "22.05";
|
|
}
|
|
];
|
|
}
|