summaryrefslogtreecommitdiff
path: root/hosts/sweetiepc
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/sweetiepc')
-rw-r--r--hosts/sweetiepc/configuration.nix51
-rw-r--r--hosts/sweetiepc/hardware-configuration.nix38
-rw-r--r--hosts/sweetiepc/resources/secrets/wg.yaml16
-rw-r--r--hosts/sweetiepc/wg.nix7
4 files changed, 112 insertions, 0 deletions
diff --git a/hosts/sweetiepc/configuration.nix b/hosts/sweetiepc/configuration.nix
new file mode 100644
index 0000000..7bf5fcb
--- /dev/null
+++ b/hosts/sweetiepc/configuration.nix
@@ -0,0 +1,51 @@
+{ config, lib, pkgs, home-manager, ... }: {
+ #imports = [ ./wg.nix ];
+
+ # Setup bootloader
+ boot._loader = {
+ enable = true;
+ loader = "grub";
+ };
+
+ # Enable common options
+ _archetypes = {
+ profiles = {
+ desktop = {
+ enable = true;
+ home.users.timmy.enable = true;
+ };
+ zfs.enable = true;
+ btrfs.enable = true;
+ gnome.enable = true;
+ };
+ collections = {
+ desktop = {
+ office.enable = true;
+ };
+ };
+ };
+
+ # Import zfs pools
+ boot.zfs.extraPools = [ "geminus" "quattuor" ];
+
+ # Enable user timmy
+ _users.timmy = {
+ enable = true;
+ };
+
+ # Disable suspend
+ systemd._suspend.disable = true;
+
+ # Configure home
+ home-manager.users.timmy = {
+ fonts.fontconfig = {
+ subpixelRendering = "rgb";
+ hinting = "none";
+ };
+ };
+
+ # Without this, "ZFS requires networking.hostId to be set" will be raised
+ networking.hostId = "fdde503a";
+
+ system.stateVersion = "26.05";
+}
diff --git a/hosts/sweetiepc/hardware-configuration.nix b/hosts/sweetiepc/hardware-configuration.nix
new file mode 100644
index 0000000..5ed162c
--- /dev/null
+++ b/hosts/sweetiepc/hardware-configuration.nix
@@ -0,0 +1,38 @@
+# Do not modify this file! It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations. Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+ imports =
+ [ (modulesPath + "/installer/scan/not-detected.nix")
+ ];
+
+ boot.initrd.availableKernelModules = [ "ehci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
+ boot.initrd.kernelModules = [ ];
+ boot.kernelModules = [ "kvm-intel" ];
+ boot.extraModulePackages = [ ];
+
+ fileSystems."/" =
+ { device = "/dev/disk/by-uuid/91572803-436d-4f43-b41f-dfba2103752e";
+ fsType = "btrfs";
+ options = [ "subvol=@" ];
+ };
+
+ fileSystems."/home" =
+ { device = "/dev/disk/by-uuid/91572803-436d-4f43-b41f-dfba2103752e";
+ fsType = "btrfs";
+ options = [ "subvol=@home" ];
+ };
+
+ fileSystems."/boot" =
+ { device = "/dev/disk/by-uuid/F618-D6C2";
+ fsType = "vfat";
+ options = [ "fmask=0022" "dmask=0022" ];
+ };
+
+ swapDevices = [ ];
+
+ nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+ hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}
diff --git a/hosts/sweetiepc/resources/secrets/wg.yaml b/hosts/sweetiepc/resources/secrets/wg.yaml
new file mode 100644
index 0000000..9edaea5
--- /dev/null
+++ b/hosts/sweetiepc/resources/secrets/wg.yaml
@@ -0,0 +1,16 @@
+wg0: ENC[AES256_GCM,data:xow2iL5l7MqlUeCZ2e9R4ygKlK3+ZP2yIR73aHWiIaO24aF02I88cWajOvs44/CP2tTHJLM6OltN/rKr3+4DLCbhOrngl/uFyWv/Xva4n9ZCWBv0DgtQ0Qbk/Bi6Q+h3Uf7XXlOtsUNvzSXvW4L+EcwsTMQRU5CIpSHcIsyG/IsQ1ypHpzDPM8j3HHtoPp6zaYPpQiELoMIIuIjvnvjTAAEWYMPuiV4OgJy2kiAUFkEwDud3MV/e/D/q861lKSz5qiKWnxE/So9kmA4HaSw9EOi46EcFojat7r3LiludcMify4V+IliVs7LPYf8kaHSOPWdmd8cgDeYP3Np0ydhB2+2xSbRLCgZvJWuxkStbeNjA5sC3tAmA86I+axhjVGRD9NdbpksdDORBMJhx2iWVhBBvM5p/Ya0f5nXHlsLw4MLSCKOZlTf9OM5YlYGw/GA30nJbcOVx1TzK+BJ0cYsz7U4YJWEMHTEPIQ==,iv:TM0Csdn65smwseVzq36IJAcapEZx+yjhRyG3Atz2Jk0=,tag:A6wWrO8PJAPFaI2IFq5Ucw==,type:str]
+sops:
+ age:
+ - enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlS0pyVGtTekV0MXQ5WHYy
+ MlRZYnVVaXdKVDlGNlZOekxUWng4NUlWTXlBCnBzbzNwUWtTdExBUXpCNy83YStm
+ Y0xvTlo5bkczS2xSdUtjenNjQlhDNlkKLS0tIGd6RjlZWGtZNVpXeVNpd0EyTk5h
+ cWN0b0dXQjNwNFZjdXdiUDZCUDZETkkKJlDzHxpRHbh4+LPEaWjrmiFFGMOL4Hdi
+ lMhSrn/EmMmf6p82FVpWMfr7fEFc9lCRw1VytKNUc1Le3nIpkM8iJQ==
+ -----END AGE ENCRYPTED FILE-----
+ recipient: age1fl4rk54n2xv4vssjkw4nywy93s4yqv69uzq2f64zuwd8fjq5u4cq9wmmsw
+ lastmodified: "2026-06-22T19:17:43Z"
+ mac: ENC[AES256_GCM,data:o+p9xd02QZ9VcUwiAMAGExf5FBrDaKCkOen58d1zTzZuiH2Svcmg5xrA+N23XuEi9kVTcqby9fpymgTOlwNZn8JbmMYjLLiykBIWQvOPKNjAGzp2A9KFA1DpIzTegM+xXbnKv+FEZdRagAojkAUftUUzQYAUsmQVDnflzwNsSUI=,iv:s0oM+TgNNUgNZQ99Pb33UCUbhdZJ93Dv1X+GK6oFUwo=,tag:306d418MjlEZnPi6L2qd/g==,type:str]
+ unencrypted_suffix: _unencrypted
+ version: 3.13.1
diff --git a/hosts/sweetiepc/wg.nix b/hosts/sweetiepc/wg.nix
new file mode 100644
index 0000000..bf459d9
--- /dev/null
+++ b/hosts/sweetiepc/wg.nix
@@ -0,0 +1,7 @@
+{ config, pkgs, inputs, ... }: {
+ sops.secrets.wg0 = { sopsFile = ./resources/secrets/wg.yaml; key = "wg0"; };
+
+ networking.wg-quick.interfaces = {
+ wg0.configFile = config.sops.secrets.wg0.path;
+ };
+}