From 16f597ef8a1f88ae6218c9e986469f2e0a10da26 Mon Sep 17 00:00:00 2001
From: 514fpv <koishi@514fpv.one>
Date: Fri, 26 Jan 2024 13:59:24 +0800
Subject: [PATCH] feat(focus): initial configuration

---
 spec/focus/default.nix | 50 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 50 insertions(+)
 create mode 100644 spec/focus/default.nix

diff --git a/spec/focus/default.nix b/spec/focus/default.nix
new file mode 100644
index 00000000..5db6cb4d
--- /dev/null
+++ b/spec/focus/default.nix
@@ -0,0 +1,50 @@
+{ lib
+, ... }: {
+  global = {
+    id = "22e9d4e37bd7436ba0cbe6e767fb0912";
+    auth.openssh.enable = true;
+    libvirt.enable = false;
+    fs.esp.uuid = "8C36-CBE2";
+    fs.type = "zfs";
+    fs.zfs.externalStore = true;
+    fs.external.device = "/dev/disk/by-uuid/59b73292-8098-4774-b8b6-59c23130d405";
+    fs.external.fsType = "xfs";
+    fs.external.options = [ "noatime" ];
+    fs.cryptsetup.enable = true;
+    fs.cryptsetup.allowDiscards = false;
+    fs.cryptsetup.uuids.secret = "c2bc361e-6f9a-48fa-b698-ed3603a9664a";
+    boot.lanzaboote = true;
+  };
+
+  services.fstrim.enable = true;
+  boot.swraid.enable = true;
+  boot.swraid.mdadmConf = ''
+    PROGRAM /usr/bin/true
+  '';
+  fileSystems."/nix/var/secret" =
+  { device = "/dev/disk/by-uuid/f8983719-f9e7-42b2-b8f3-0f32f6b328ae";
+    fsType = "ext4";
+    options = [ "noatime" ];
+    neededForBoot = true;
+    depends = [ "/nix/var" ];
+  };
+  boot.initrd.systemd.services.zfs-import-focus.after = [ "cryptsetup.target" ];
+
+  networking.proxy = {
+    default = "socks5://192.168.1.1:1080";
+    noProxy = "10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,127.0.0.1,localhost,.localdomain";
+  };
+
+  imports = lib.pipe ./. [
+    builtins.readDir
+    (lib.filterAttrs (n: ty: ty == "regular" && n != "default.nix"))
+    (lib.mapAttrsToList (n: _: ./${n}))
+  ];
+
+  hardware.enableRedistributableFirmware = true;
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ "i915" ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+  hardware.cpu.intel.updateMicrocode = true;
+}