koishi/nixos
1
0
Fork 0
Code Issues Pull requests Projects Activity

feat(focus): initial configuration

Browse source
This commit is contained in:
514fpv 2024-01-26 13:59:24 +08:00
parent 483e7a563d
commit 16f597ef8a
Signed by: koishi
SSH key fingerprint: SHA256:axz0uIzzY+5W19i7QOUuiw5LSqhKfCBKPf3L4xFRxLw
1 changed files with 50 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

50
spec/focus/default.nix Normal file
View file

@ -0,0 +1,50 @@
{ lib
, ... }: {
global = {
id = "22e9d4e37bd7436ba0cbe6e767fb0912";
auth.openssh.enable = true;
libvirt.enable = false;
fs.esp.uuid = "8C36-CBE2";
fs.type = "zfs";
fs.zfs.externalStore = true;
fs.external.device = "/dev/disk/by-uuid/59b73292-8098-4774-b8b6-59c23130d405";
fs.external.fsType = "xfs";
fs.external.options = [ "noatime" ];
fs.cryptsetup.enable = true;
fs.cryptsetup.allowDiscards = false;
fs.cryptsetup.uuids.secret = "c2bc361e-6f9a-48fa-b698-ed3603a9664a";
boot.lanzaboote = true;
};
services.fstrim.enable = true;
boot.swraid.enable = true;
boot.swraid.mdadmConf = ''
PROGRAM /usr/bin/true
'';
fileSystems."/nix/var/secret" =
{ device = "/dev/disk/by-uuid/f8983719-f9e7-42b2-b8f3-0f32f6b328ae";
fsType = "ext4";
options = [ "noatime" ];
neededForBoot = true;
depends = [ "/nix/var" ];
};
boot.initrd.systemd.services.zfs-import-focus.after = [ "cryptsetup.target" ];
networking.proxy = {
default = "socks5://192.168.1.1:1080";
noProxy = "10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,127.0.0.1,localhost,.localdomain";
};
imports = lib.pipe ./. [
builtins.readDir
(lib.filterAttrs (n: ty: ty == "regular" && n != "default.nix"))
(lib.mapAttrsToList (n: _: ./${n}))
];
hardware.enableRedistributableFirmware = true;
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
boot.initrd.kernelModules = [ "i915" ];
boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ];
hardware.cpu.intel.updateMicrocode = true;
}