waveringana/nixcfg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

organization

Browse source
This commit is contained in:
waveringana 2025-06-17 19:34:05 -04:00
parent 440348d1e5
commit 7a31cdd170
3 changed files with 296 additions and 168 deletions
Download patch file Download diff file Expand all files Collapse all files

115
hosts/buer/default.nix
View file

@ -1,7 +1,9 @@
# hosts/valefar/configuration.nix (or default.nix)
# hosts/buer/configuration.nix (or default.nix)
{ config, lib, pkgs, modulesPath, inputs, ... }:
{
# =============================================================================
# IMPORTS
# =============================================================================
imports = [
# Host-specific hardware
./hardware.nix
@ -12,57 +14,68 @@
../../common/users.nix
../../common/services.nix
# Common secrets
../../host-secrets.nix
];
# =============================================================================
# SYSTEM CONFIGURATION
# =============================================================================
system.stateVersion = "24.11";
modules.garage.enable = true;
# pin host platform & microcode
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
# Intel microcode updates
hardware.cpu.intel.updateMicrocode = lib.mkDefault
config.hardware.enableRedistributableFirmware;
boot.loader.grub.enable = true;
boot.loader.grub.device = "/dev/vda";
# =============================================================================
# CUSTOM MODULES
# =============================================================================
modules.garage.enable = true;
networking.hostName = "buer";
networking.hostId = "1418d29e";
networking.firewall.enable = false;
networking.useDHCP = false;
systemd.network.enable = true;
systemd.network.networks."10-wan" = {
matchConfig.Name = "ens3";
address = [
"103.251.165.107/24"
"2a04:52c0:0135:48d1::2/48"
];
gateway = [
"103.251.165.1"
"2a04:52c0:0135::1"
];
dns = [
"2a01:6340:1:20:4::10"
"2a04:52c0:130:2a5c::10"
"185.31.172.240"
"5.255.125.240"
];
# =============================================================================
# BOOT CONFIGURATION
# =============================================================================
boot.loader.grub = {
enable = true;
device = "/dev/vda";
};
#boot.supportedFilesystems = [ "zfs" ];
#boot.kernelModules = [ "nct6775" "coretemp" ];
#services.zfs.autoScrub.enable = true;
#services.zfs.trim.enable = true;
# =============================================================================
# NETWORKING
# =============================================================================
networking = {
hostName = "buer";
hostId = "1418d29e";
firewall.enable = false;
useDHCP = false;
};
environment.systemPackages = with pkgs; [
#lm_sensors
#code-server
inputs.agenix.packages.x86_64-linux.default
];
# Static IP configuration via systemd-networkd
systemd.network = {
enable = true;
networks."10-wan" = {
matchConfig.Name = "ens3";
address = [
"103.251.165.107/24"
"2a04:52c0:0135:48d1::2/48"
];
gateway = [
"103.251.165.1"
"2a04:52c0:0135::1"
];
dns = [
"2a01:6340:1:20:4::10"
"2a04:52c0:130:2a5c::10"
"185.31.172.240"
"5.255.125.240"
];
};
};
# =============================================================================
# VIRTUALIZATION
# =============================================================================
virtualisation.docker = {
enable = true;
enableOnBoot = true;
@ -70,4 +83,24 @@
buildGoModule = pkgs.buildGo123Module;
};
};
}
# =============================================================================
# PACKAGES
# =============================================================================
environment.systemPackages = with pkgs; [
inputs.agenix.packages.x86_64-linux.default
];
# =============================================================================
# COMMENTED OUT / DISABLED
# =============================================================================
# ZFS support (not needed for this VPS)
# boot.supportedFilesystems = [ "zfs" ];
# boot.kernelModules = [ "nct6775" "coretemp" ];
# services.zfs.autoScrub.enable = true;
# services.zfs.trim.enable = true;
# Additional packages (not needed)
# lm_sensors
# code-server
}