This commit is contained in:
James Eversole 2023-06-26 16:30:36 -05:00
parent c8366db03f
commit 6081557b6b
9 changed files with 23 additions and 47 deletions

View File

@ -25,11 +25,11 @@
modules = [
({ modulesPath, ... }: {
imports = [
agenix.nixosModules.default
imports = [
agenix.nixosModules.default
./system/containers.nix
./system/hardware-configuration.nix
./system/hardware-configuration.nix
./system/nix-configuration.nix
./system/security.nix
./system/services.nix

View File

@ -1,13 +1,10 @@
let
james = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID7R6FstqVDjVuyKGEUmWolYJ/I/DDxYOQV/zKPkiAth james@eversole.co";
eve-psr-nix0 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMyaPYK0HcKAjrD1g+FPqPEU9FJ0I6+iKYmQlWKE0zHp root@matri.cx";
james =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID7R6FstqVDjVuyKGEUmWolYJ/I/DDxYOQV/zKPkiAth james@eversole.co";
eve-psr-nix0 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMyaPYK0HcKAjrD1g+FPqPEU9FJ0I6+iKYmQlWKE0zHp root@matri.cx";
all = [ james eve-psr-nix0 ];
in
{
"secrets/keys.age" = {
publicKeys = all;
};
"secrets/sezycei.age" = {
publicKeys = all;
};
in {
"secrets/keys.age" = { publicKeys = all; };
"secrets/sezycei.age" = { publicKeys = all; };
}

View File

@ -88,7 +88,8 @@
"/etc/localtime:/etc/localtime:ro"
"/home/torrent/data:/data"
];
environmentFiles = [ /home/sezycei/srv/containerdata/transmission/.env ];
environmentFiles =
[ /home/sezycei/srv/containerdata/transmission/.env ];
extraOptions = [ "--cap-add=NET_ADMIN" "--privileged" ];
};
};

View File

@ -1,5 +1,4 @@
{ ... }:
{
{ ... }: {
nix = {
buildMachines = [ ];
distributedBuilds = false;

View File

@ -1,4 +1 @@
{ ... }:
{
security.sudo.wheelNeedsPassword = false;
}
{ ... }: { security.sudo.wheelNeedsPassword = false; }

View File

@ -1,9 +1,6 @@
{ ... }:
{
{ ... }: {
services = {
openssh = {
enable = true;
};
openssh = { enable = true; };
hydra = {
enable = true;

View File

@ -1,5 +1,4 @@
{ pkgs, ... }:
{
{ pkgs, ... }: {
boot = {
loader.systemd-boot.enable = true;
loader.efi.canTouchEfiVariables = true;

View File

@ -1,8 +1 @@
{ ... }:
{
virtualisation = {
oci-containers = {
backend = "podman";
};
};
}
{ ... }: { virtualisation = { oci-containers = { backend = "podman"; }; }; }

View File

@ -1,18 +1,11 @@
{ config, pkgs, ... }:
{
{ config, pkgs, ... }: {
users.users = {
sezycei = {
isNormalUser = true;
passwordFile = config.age.secrets.sezycei.path;
extraGroups = [ "wheel" ];
packages = with pkgs; [
byobu
tmux
stack
];
extraGroups = [ "wheel" ];
packages = with pkgs; [ byobu tmux stack ];
};
torrent = {
isNormalUser = true;
};
};
torrent = { isNormalUser = true; };
};
}