129 lines
2.6 KiB
Nix
129 lines
2.6 KiB
Nix
{
|
|
pkgs,
|
|
hostname,
|
|
user,
|
|
...
|
|
}: {
|
|
imports = [
|
|
../../../modules/platform/nixos
|
|
];
|
|
|
|
boot = {
|
|
loader = {
|
|
systemd-boot = {
|
|
enable = true;
|
|
configurationLimit = 42;
|
|
};
|
|
efi.canTouchEfiVariables = true;
|
|
};
|
|
initrd.availableKernelModules = [
|
|
"xhci_pci"
|
|
"ahci"
|
|
"nvme"
|
|
"usbhid"
|
|
"usb_storage"
|
|
"sd_mod"
|
|
];
|
|
kernelPackages = pkgs.linuxPackages_latest;
|
|
};
|
|
|
|
fileSystems."/" = {
|
|
device = "/dev/disk/by-label/NIXROOT";
|
|
fsType = "ext4";
|
|
};
|
|
|
|
fileSystems."/boot" = {
|
|
device = "/dev/disk/by-label/NIXBOOT";
|
|
fsType = "vfat";
|
|
};
|
|
|
|
networking = {
|
|
hostName = hostname;
|
|
useDHCP = false;
|
|
interfaces.eno1.ipv4.addresses = [
|
|
{
|
|
address = "192.168.1.10";
|
|
prefixLength = 24;
|
|
}
|
|
];
|
|
defaultGateway = "192.168.1.1";
|
|
nameservers = ["1.1.1.1"];
|
|
};
|
|
|
|
sops.secrets = {
|
|
tahani-syncthing-cert = {
|
|
sopsFile = ../../../secrets/tahani-syncthing-cert;
|
|
format = "binary";
|
|
owner = user;
|
|
path = "/home/${user}/.config/syncthing/cert.pem";
|
|
};
|
|
tahani-syncthing-key = {
|
|
sopsFile = ../../../secrets/tahani-syncthing-key;
|
|
format = "binary";
|
|
owner = user;
|
|
path = "/home/${user}/.config/syncthing/key.pem";
|
|
};
|
|
};
|
|
|
|
services.syncthing = {
|
|
enable = true;
|
|
openDefaultPorts = true;
|
|
dataDir = "/home/${user}/.local/share/syncthing";
|
|
configDir = "/home/${user}/.config/syncthing";
|
|
user = "${user}";
|
|
group = "users";
|
|
guiAddress = "0.0.0.0:8384";
|
|
overrideFolders = true;
|
|
overrideDevices = true;
|
|
|
|
settings = {
|
|
devices = {};
|
|
options.globalAnnounceEnabled = false;
|
|
};
|
|
folders = {
|
|
"Projects" = {
|
|
path = "/home/${user}/Projects";
|
|
devices = [];
|
|
};
|
|
};
|
|
};
|
|
|
|
services.postgresql = {
|
|
enable = true;
|
|
package = pkgs.postgresql_17;
|
|
extensions = [pkgs.postgresql17Packages.timescaledb];
|
|
enableTCPIP = true;
|
|
ensureDatabases = ["postgres"];
|
|
ensureUsers = [
|
|
{
|
|
name = "postgres";
|
|
ensureDBOwnership = true;
|
|
}
|
|
{
|
|
name = "cschmatzler";
|
|
ensureClauses = {
|
|
superuser = true;
|
|
createdb = true;
|
|
};
|
|
}
|
|
];
|
|
authentication = pkgs.lib.mkOverride 10 ''
|
|
local all all trust
|
|
host all all 127.0.0.1/32 trust
|
|
host all all ::1/128 trust
|
|
host all all 100.64.0.0/10 trust
|
|
'';
|
|
settings = {
|
|
shared_preload_libraries = ["timescaledb"];
|
|
};
|
|
};
|
|
|
|
services.clickhouse = {
|
|
enable = true;
|
|
};
|
|
|
|
home-manager.users.${user} = {
|
|
programs.git.userEmail = "christoph@schmatzler.com";
|
|
};
|
|
}
|