wiro.world
yep, more dotfiles
feat(server): add nixos-anywhere
+40
-47
+4
README.md
+4
README.md
+2
nixos/fragments/nix.nix
+2
nixos/fragments/nix.nix
+10
-33
nixos/layout/ext4-hetzner.nix
+10
-33
nixos/layout/ext4-hetzner.nix
···
6
6
cfg = config.local.disk;
7
7
in
8
8
{
9
-
options = { };
10
-
11
9
config.disko.devices.disk.primary = {
10
+
type = "disk";
12
11
device = cfg.device;
13
12
content = {
14
13
type = "gpt";
15
14
partitions = {
15
+
boot = {
16
+
size = "1M";
17
+
type = "EF02";
18
+
priority = 1;
19
+
};
16
20
ESP = {
17
21
size = "512M";
18
22
type = "EF00";
···
22
26
mountpoint = "/boot";
23
27
};
24
28
};
25
-
luks = {
29
+
root = {
26
30
size = "100%";
27
31
content = {
28
-
type = "luks";
29
-
# TODO: change to encrypted
30
-
name = "crypted";
31
-
settings = {
32
-
allowDiscards = true;
33
-
# yubiKey = I want a YubiKey
34
-
};
35
-
content = {
36
-
type = "btrfs";
37
-
extraArgs = [ "-f" ];
38
-
subvolumes = {
39
-
"/root" = {
40
-
mountpoint = "/";
41
-
mountOptions = [ "compress=zstd" "noatime" ];
42
-
};
43
-
"/home" = {
44
-
mountpoint = "/home";
45
-
mountOptions = [ "compress=zstd" "noatime" ];
46
-
};
47
-
"/nix" = {
48
-
mountpoint = "/nix";
49
-
mountOptions = [ "compress=zstd" "noatime" ];
50
-
};
51
-
"/swap" = {
52
-
mountpoint = "/.swapvol";
53
-
swap.swapfile.size = "${toString cfg.swapSize}G";
54
-
};
55
-
};
56
-
};
32
+
type = "filesystem";
33
+
format = "ext4";
34
+
mountpoint = "/";
57
35
};
58
36
};
59
37
};
60
38
};
61
39
};
62
40
}
63
-
-2
nixos/layout/luks-btrfs.nix
-2
nixos/layout/luks-btrfs.nix
+23
-12
nixos/profiles/server.nix
+23
-12
nixos/profiles/server.nix
···
1
-
{ config
2
-
, pkgs
3
-
, upkgs
4
-
, ...
1
+
{ ...
5
2
}:
6
3
7
4
let
8
-
ext-if = "en0";
5
+
ext-if = "eth0";
9
6
10
-
external-ip6 = "2a01:4f8:c2c:76d2::/64";
7
+
external-ip6 = "2a01:4f8:c2c:76d2::1";
11
8
external-netmask6 = 64;
12
9
external-gw6 = "fe80::1";
13
10
in
···
15
12
imports = [ ];
16
13
17
14
config = {
18
-
boot.loader.grub.device = "/dev/nvme0n1";
15
+
boot.loader.grub.enable = true;
16
+
boot.initrd.availableKernelModules = [ "ahci" "xhci_pci" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" "ext4" ];
19
17
20
18
# Single network card is `eth0`
21
19
networking.usePredictableInterfaceNames = false;
···
31
29
interface = ext-if;
32
30
address = external-gw6;
33
31
};
32
+
33
+
# # Rely on Hetzner firewall instead?
34
+
# firewall.enable = false;
35
+
firewall.allowedTCPPorts = [ 22 80 443 ];
34
36
};
37
+
38
+
services.openssh.enable = true;
35
39
36
40
services.qemuGuest.enable = true;
37
41
···
56
60
# services.pds = {
57
61
# enable = true;
58
62
# pdsadmin.enable = true;
59
-
60
-
61
63
# };
62
64
63
65
services.caddy = {
64
66
enable = true;
65
67
66
-
virtualHosts."localhost".extraConfig = ''
67
-
reverse_proxy https://wirolibre.xyz/
68
+
virtualHosts."ping.wiro.world".extraConfig = ''
69
+
header Content-Type text/html
70
+
respond <<HTML
71
+
<html>
72
+
<head><title>Foo</title></head>
73
+
<body>Foo</body>
74
+
</html>
75
+
HTML 200
68
76
'';
69
77
};
70
78
79
+
security.sudo.wheelNeedsPassword = false;
80
+
81
+
local.fragment.nix.enable = true;
82
+
71
83
programs.fish.enable = true;
72
84
};
73
85
}
74
-