This commit is contained in:
Elias Gasparis 2025-11-06 19:49:17 +08:00
commit c2c5e2c070
11 changed files with 135 additions and 113 deletions

View file

@ -11,18 +11,17 @@
imports =
[ # Include the results of the hardware scan.
./hardware-configuration.nix
./services/jellyfin.nix
./services/calibre-web.nix
./services/glances.nix
./services/fail2ban.nix
./services/transmission.nix
# ./services/nextcloud.nix
# user docker for now
# ./services/jellyfin.nix
# ./services/calibre-web.nix
# ./services/glances.nix
# ./services/fail2ban.nix
# ./services/transmission.nix
# ./services/nextcloud.nix
];
# Bootloader.
boot.loader.systemd-boot.enable = true;
# ZFS SSH Remote Unlock, ethernet only
# ZFS SSH Remote Unlock, only works with ethernet now
# https://wiki.nixos.org/wiki/ZFS
boot = {
initrd.network = {
@ -37,7 +36,7 @@
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL3Ihu9CsCL17FuHl6EqyMDT5BPjh8GlLTWHM+Y1D1I7 elias@bluenix" #bluenix
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILv96m1nCz3D0lzjzeGa+n4m3krEyl7KZ0tstjIZdTkq elias@bluefin" #acer
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK8zlxSVOTCnAgb4U5vkC3ietH3Jd9gLE+FA6UOZp64J elias@arkadi.one" #arkadi
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILLT5HqaL4l0+D4kesHph1pD74VnFy6eMxhGrBdwDThQ elias@greynix"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKWN6eeLFbtRJDEebSjoI8FaDOA5bmIzbyTUvX/hPWdh elias@greynix" #asus
];
# to login: ssh -p 2222 root@192.168.15.180 "zfs load-key -a && killall zfs"
};
@ -55,7 +54,7 @@
nix = {
settings = {
#experimental-features = [ "nix-command" "flakes" ];
download-buffer-size = "2G";
download-buffer-size = "4G";
warn-dirty = false;
};
# garbage collection
@ -72,6 +71,14 @@
networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
networking.hostId = "0631374f"; # for ZFS
#TEMP
networking.wireless.networks = {
# SSID with spaces and/or special characters
"Suntek 188" = {
psk = "0226203850";
};
};
# Enable networking
#networking.networkmanager.enable = true;
@ -93,20 +100,13 @@
LC_TIME = "zh_TW.UTF-8";
};
nix.settings.experimental-features = [ "nix-command" "flakes" ];
#fix later
# Configure keymap in X11
# services.xserver = {
# xkb.layout = "us";
# xkb.Variant = "";
# };
nix.settings.experimental-features = [ "nix-command" "flakes" ];
# Define a user account. Don't forget to set a password with passwd.
users.users.elias = {
isNormalUser = true;
description = "Tootbrute";
extraGroups = [ "networkmanager" "wheel" "docker"];
extraGroups = [ "networkmanager" "wheel" "docker" "elias" ];
openssh.authorizedKeys.keys = [
"ssh-rsa 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 elias@socrates" #acer at school
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGfnE4JwpIyghoFYurZLjFkzc5G4l1FeS76yYITg9wUB elias@tux" #little hp - tux
@ -114,7 +114,7 @@ nix.settings.experimental-features = [ "nix-command" "flakes" ];
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL3Ihu9CsCL17FuHl6EqyMDT5BPjh8GlLTWHM+Y1D1I7 elias@bluenix" #bluenix
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILv96m1nCz3D0lzjzeGa+n4m3krEyl7KZ0tstjIZdTkq elias@bluefin" #acer
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK8zlxSVOTCnAgb4U5vkC3ietH3Jd9gLE+FA6UOZp64J elias@arkadi.one"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMVWt9UsavFfdwQzklW/zSlwGwQXaDvFk+MdzsCp0gnp tootbrute@tutanota.com" #greynix
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKWN6eeLFbtRJDEebSjoI8FaDOA5bmIzbyTUvX/hPWdh elias@greynix" #asus - greynix
];
linger = true;
packages = with pkgs; [];
@ -134,9 +134,6 @@ nix.settings.experimental-features = [ "nix-command" "flakes" ];
# Disable sudo password for the wheel group
security.sudo.wheelNeedsPassword = false;
# Enable automatic login for the user.
#services.getty.autologinUser = "elias";
# Allow unfree packages
nixpkgs.config.allowUnfree = true;
@ -153,6 +150,7 @@ nix.settings.experimental-features = [ "nix-command" "flakes" ];
restic
git
neovim
emacs
tmux #like screen
wiper #like ncdu