From caafb773acb07d36c6e8dd7aff0a3c9dd7f3af4b Mon Sep 17 00:00:00 2001 From: Lauren Lagarde Date: Sun, 6 Jul 2025 22:41:23 -0500 Subject: [PATCH] Mess with stronghold configuration and VM stuff --- flake.nix | 2 +- nixos/disko/libvirt/uefi-zfs-base.nix | 2 + secrets.tar.zst.gpg | Bin 6042 -> 6307 bytes systems/stronghold/configuration.nix | 73 ++++++++++++++++++ systems/vm-docker-host/vm-docker-host-zfs.nix | 2 - vm.sh | 1 + 6 files changed, 77 insertions(+), 3 deletions(-) create mode 100644 systems/stronghold/configuration.nix create mode 100755 vm.sh diff --git a/flake.nix b/flake.nix index 0d4c2e0..4a21f8a 100644 --- a/flake.nix +++ b/flake.nix @@ -206,7 +206,7 @@ networking.hostName = "stronghold"; networking.hostId = "c581a1cd"; } - ./systems/vm-docker-base.nix + ./systems/stronghold/configuration.nix lix-module.nixosModules.default home-manager.nixosModules.home-manager diff --git a/nixos/disko/libvirt/uefi-zfs-base.nix b/nixos/disko/libvirt/uefi-zfs-base.nix index c78602f..bd041bd 100644 --- a/nixos/disko/libvirt/uefi-zfs-base.nix +++ b/nixos/disko/libvirt/uefi-zfs-base.nix @@ -1,4 +1,6 @@ { ... }: { + boot.supportedFilesystems = [ "zfs" ]; + disko.devices = { disk = { vda = { diff --git a/secrets.tar.zst.gpg b/secrets.tar.zst.gpg index cd61a2df4083c7c257e7a93e5dcf71ac56cd7c3a..92633c017421f1d5e53eeaeea53a664d1b6fdad9 100644 GIT binary patch literal 6307 zcmV;U7+mLt0t^GtQPoXEkO}7j5CDKhIKbBGpf+58q*N!#OGnfn3a>;dS&-;qI5rh0 zn|!uJ&Ri|~*(0kQ;T|prOO;!TWuk5ta)l1&q|;1WkN9<`!gm&%;mg{{!zo_}$1Uhh z$(-g!7^^QEa`(FVo^G+1yhr(brLBcBBsKaV)nA(Cs{r-f0{-b$6YOYjq*4X4Tos4{ zotnX&-}6DmL*qif=CNHd&%*~0DzNqaZM?79(S|N( z*iercYGl}jLLZ&3VrOES>PhmG?e+i1kd_}QZg#<`@BF)} zWCZnatXR%5ePTn`srdQ$P5Zy01>3Y8c`10jVe-7~hMm({p9AO(oynID`YgRzCSjA8`@kFNhI994ma43#0M$lDMjL>$3)^B|}%l+#v=1^i<6=T$d%9DDOaW-D=@C5}EDi5L)9ab?O+!HpB^R z4*9-aSh1#7xH@fLyh%G@IppbHGw~0E9}dT&+Zt665f_}g+<)4#e-2yk^@KCbnV9&# z6dGr?ZEch$OGC3+tQfA=lhPrzVz>!&YC29u^VVc*AU*;jsG2urkw5we0F(S$Yk?zi zbtsSNKWR^|$M&Ybp5Oz^*)OdqKW|K%`RQj|=hCj7f5c=YC8ui4dE;ia8d-KuIu{5t|x;VgVk z$)Bd+`m<^7TP{0sIWIPtDo8_edS7|$hrl{37nATIxeNxZSU;U5qrkC~p0f&AA_$}gh{$fc%@qTf6 z0=3yVWZ1*NWUsEY;y2jCxDQ^Ah+IzYzn!~|F2K{@TfZw^h=aCDH(`S}z(rUgzp<1g zkfutgB0owdql>u;17RZt7C(@fx35xvCaiNi)PO{^4}HsyurwiU#J$ilR_OL72y*afa?9&zYKU&AOrS;F^^D?k^-*Fna|wgJ-RrDDCdn37Bm%sE9YQC((u?5f%j%6i z9%%k&Y89mEf-nT`*WA^uFr&2;b|{%kSO=0F;q=U2NU*jNXs%+fVGJXIzK1Z&Ej(x& z>W(MiZ*CN{06}kRIvG5RZuMfltQ^)Y1FK=w5(#rEq4Vg^o9K6@0GP|w>wZ_5OZ|do z93?qa%$Z&hnlLId05G{|%n@sg3!B^Uw>lWCh%xZrsn^(p8pDK9=4Z0~qXxoE9ZHyR z2c%nVM$vSr1BFvUA#`xOCFDw-plU7vw)=bwhU5a#6!`Z}YJ+Ltp!HF_5(orixN(?4eILjJ((i!fmPb zKz49pjh#C@l99AWb>Wf1S&sB|d|1}e8(&o5o-WfWUet9}#(JDT$(!;0q`3odIqn-S zb&vNHDGYop*TP*>^-1{lRgo`JCJh#p9H%ZHMGfX6Md>Y~aJ8$f~q!BNL8K1O@=}#^yEin;L7bHF?(jhEm~$4 z=y4$#-pi{wzwcCSLVj_Uzy$UKXan`__-T^QpR=YM_KaA7Ao_f98WD7zQt3%02ZV0o znN?Z{{oOe|V4voc2&ztR{@Q42=)_^8d3`VChBunzdo@O-vB$q;IN+IUoufQp`RwCC z@;Ml_wQw%$g8^mzC?%W=n;niug32|c`=CvP^60iIsSpDE^f#QZ{3ezy6UZ(}2_39n zql`cg^S01i)6GX~Ks4r5f33xxYc&2lpTYfY`pn>U+A|ebD_p~3k-H}8gE1wr2$Fpv z25;E0jnK^b9RT5y6k@(tNDD_ zAV+|{3u-#b&BwHgioF{(4RQuz)dx(x(7>mK1ZsrwpsOX54}q%a+@imB-y$OaI%L;8 z!|Awr-gKo2ki6R64tMi`vC6I7Ngj5Zl7m$$sG1^N5CINzt)F}bp)7IRf1o^$nt=T^ z+?;c#erzLDsJvAUD=sH0d2Qb7Skw7g9vM<`N};w!L^95^~r#5hyCydF2NVmJTL0aSdj)c zT^%E1OPgs-a0<31YHIk&89057_FoDKaZpsG+~!q34;<4|pp4&?YuKbt;W?Qq<`ss5 z9vU-kMnm+w{yBB9gYH(If;93sYnPY1NfbC;Ps*YIYxiGi`ZwpY2A#^g`nd(u-OLHY z@w|=7Q(d0!&QK_r)Y&kw^Y|3hcCv^R;24og=?W;ZI{yGs_hHc=Yo5$bSc@8no9D=K zi0EvbbREf{E@tandn==Aw|>ksN;c#VGXL|V+q<=sizOLz=+s}!u)6S-~13DjCTM{5&?kaWj<_!o<<7Q`A0`jbhP!tt;ErgrGa;l#L#(0LpV!h+JDs6b&l-%g&RTp%`#5&5GI|iyE6whI>{BRe zFHuTrNa(pjkGc=T)A}`Jh8ZE`H6gbvitnSn_DWJ#Q1X*U~7jD$OgV0 zUD(xpQi_^AKtjIt028Y-v8;zMm$nOzU$U~mCrJRZ!y;V-FLBPW5KE1hT!}{OQp(xJ zyy%Feb-nlBDXoAN*fMrUX$D(VoVjk7|RUA={a0aPjGSVHLaT527fouYZq zf0~LVsgqch%bTve0A`&O2E99kQTPG@WB}`*EZ9dZ1Mto#n4_q%KDdnFT8gG3eRqKB zt8C^ZXqDM5Rfd}rzY8r@#FwVuzBjG7p13{sSXqKBTXw+K!rCSO=y|=)b+Cj=j&;e` zcq%>iH~_aOy`mc8GpUXzTre42#K90`5pMyLb%*H3ED-BIJG$SxLS?EQihV1%Ug^o; zC`zYcpZ{JI2~+_&F&AM@-TvoBP%bg`@*79X?>}Y#Ql8sKg_si?xmPa|+dia1cLQ5H zN4Sgo)}drvS!{jb5?_L#?%HL6#BuAm1)v)4!{pG{6Q3Jzqd0g@7$jgUGL*#k=F2HY z`f`DE$UwP%{FbD!k~!p(oR+q4K&kgj)6R#EAaOK}^Y{)v1gdUA8QYOqZ?wVkZf%c0 zG+Q8oKpYhSkfv$wWFhFn0yqkZW#XRYO6@1Jn4JDBG08~hJVz`6p{Jm?XdYtZr4%05 zs2m~~gIRUv7pelhsBZivtDbwxKHQ?vbqsO!tG$$5C=j5RgNudojcDc*zc|)umgE3C zT~F>~F-yS66ugJH?PkPg&0jIk$d_HEHjos85-#wsNRIkQ%S#EvN0rGe*<3z{uf~fL z6A|(HYdmP&fGezLyDpS)y)#EpZ8;c2Jw!5k0rza)`z%|jlN#^COHDaiS|X3eBc*mD zjUlSeXs7xZhd)opf<=iCix*M1_Gp zE&r>N8e(#14al@{0hO!USU7B%p>W+Djw7$(AUwMEw_nHV^Omc4FH z$^TKpzpbTq|7^S4nYD*0!D>9dN~0lJ?HcD8s7M-js&DJtitiuZTa;|`p6GS8Su8_^ z#MelG)2A&;gq^(RD&=tDdKP6@z|g&MAZ{+aPL^W51sNn?3P}uB0Z@|RPm%j)z`&Z7 z9N%(A9WTH5t|AcX#x)2J5;6jj3dgS#oq#qG*PO6v7%XM&!ecXb--nWKh?UB^fE&?y z>M(X*%on??wD-83Gc1(il{dDeU6ng3*BwS_n(Qd@E0qaeq#V@(J&W`P(nGl>J{&>! zA390v;8|wJ!S3%P_9f=C(s>p%lVstoXUxbT@61A;vtEa8^m%&-Ab0-Lefa{FFMZO8 zTJ5;gTiaaa)vK&=Oh9!Du_!1ca_pe)PlTInh=Ts8&Ov@AB}R#EdT`sjgw?rt2?s2Q zT^sgCsdpizzG39c<-;jCudkPs+@X;bW3&zBW1O|0tOf$vldDIvLf4M6{Hb{F1$76A zZYG(a6uNso@(gM|cM|Uk+ClOox->|SEH8W`ZvE22z4s;($D`4EmjXa~}Q{&mpk3am1p&RrV zzb-OhB|Tm~G}&YX&a-WGVQ1YLDH7;}AG1y+v9=MQ#dbDId0s3)?NrFNH2rXm)4(>M zr(~7th*a8)Z)$l;WGS0eIPwE`!<)#aknhD$rs-54_Ec$c7Z92JyItBoPBciZbQ=!X zPkx>I5erqsKbfAl1VHpho*frv*Y`oU12hL@@8W|VOW}pQ$9t!@m#?o6 zJXby5Rv(F?YPUG5w0yL&$uvqb|GA;dGq(Xx5yuo@8KwueRq$PD z=!=6mDzXpM4V63LgfqTCBsIdTU!HANu6d+@ZIOLT{gYec#KJwHxEO?aqq?W+H;{w) ztPoaY-?>|P?8G~ay+}l>6x&B)rT8?Kb*wrDFWZiv@-rQQe3H>TnIjA?t1SXc5j0t1 zIq;eLwX|Ig7Ge-A&;6!olz+^=5jcc5?v-N}r`P$24&Z z!2A@A@an~x=nMgvWm22&{BHzo<40JKvGea}x*7qse!Ni>CarSJ2NLAt`$ zO+7@if~BSH6NU6L6tE1N`FxDYlxn4~ySCf0h6-tPRS0$@+ExJmLTMnG;}|=}w!y(iO{XA@7in+(mgHYfYkd$pV;h?Xn3wcnlc9@B1C^9jm_Ut>(Q?mSf zit8o7cpVYtYiXRqV(+F&<+GXe7NPHKgV54TDNXBeL(Vy?zx`nJ#F4<(Cv^Oit@V%5knAf5q1*<=(imwICSfcGg#DVF3kF#`o%-5V;$> z%NNe!PHZ)huyJ$m19y=ClS&0x(_;`N(!w(P4fX9Hm#p&3uqGBoXsH>NwP)&iHK^u} z@ngV!b0I{iwNv?^U67k@ly7|pY1$uF8D=q2rJg>%Ac>^&qSVKPz+7AD0OLuJZFe-R zQfERJd<62kjGUu%ezK$F4;Ke#>kQN-#q*c`Bb1(a~I4a$tU3TFnvB=p7 zWaG3tyhQKmkVLj{(=MC*dcTZf6RsbJ96b@I3}%6?1UP327Ij z3J|A7~IA? zZCrLY&1zY2%;ZpXii616>6rmxVi-rvw7x1wfcvMY3l$AY$SRO-K&m4W)U_BG&yF8B z;SHX8n`vdyM{Ifz7wwS6%*>p3fPC=SKY%qC5@nNaOZm08jkX-+(9YZJ6DWL!*8L&1 ze4DvVIBDP34x*3r%ZjY&nu3cs&eW3c$x^1ZH-rXLr>@}RPQ_ygfoKo0fu z8a+Bi%)3LWe$Wa(LEBRlSIejvJq#&^;gg(7>+}<|dJDqmAO8b50+HKI2$c2v{5P)t ZQxxf$tX|w;rQ}}i6@)!Q);w!FPX+#%K9~Ri literal 6042 zcmV;L7iH*$0t^GtQPoXEkO}7j5B(kwS36wsI?o$wr}y{p%!CY2bc^;8eaTYQjpaVJ zm~PBQyDIr^Oudy!Yx;H-WB@u};cm183t2-B_ydgp3^zJXlfw3KK>Ca4ZXJ{mhX*3|&nTOqvJuv6hSlQ?>W6$ls6jmc+l?8o#Va3MfKCMG;3(Nrd zX~mlnV8Lf;->2{H8wR%nA{h4DxA{(YhEi*2H8++FdGIYd#P~G<0~gU{n}S=dyVvKX z*kc>UgkJHbZkoJsFLL4{k>w$jA`6=&YI5wiXOkTI(m{Cz!A5Ru_*E)}F(|2UdQn2} zuCO14jAzrvgHBHlK?8c zlDsK0#E{JKz9t4jo_M(Mb*U9%bPn3CGE&Q4sg|Ud6hWbpc4Qd)dtY z3Gsm?QnTgnQSJ5(7Jai%949aUPW$MyQq`o43(2&Egbl(2`Z*b8TBZ6S6{akGO1fDc znhB=nYN>d_KDhVGUp;o2swNE+sN-;afzPy;L>COMLEMvH=g<*K{ih!HlTGNu8Az=X z4~+ROoxHYwbOcgAQw0XxGcs3BRqAKbGy29);FDrkO#E9HG68}1nt-s6$alU3_TOZB z5aJm5yx_N~>#T{6iv{{jL6RC=2kix9Ww_0!* zEx}q(75H<|V8uYu)x0>i4bqOdnHg{yz<{sy)J`>Ut(_sEQ{3CE9Ft*)>3I&T+dtDA zXh%|%j6E3WCRzwq!vdEzX8{u=pAo@-mQn^e1Q|T7S5xj6j_1U_2W}E3C18(LqLH*i ztUviijJ8TqGf51i2?_I%zz+Ou6(vtm(lqu0k` z325Au|F5L_=+p1_$bNaO4-Tk^9tYSyT_T=?ank+~H+MDOM5Fv6OtcmbE?ba$(&CL< z(l2^cw3DI--Fp{t(-?HiF-C>lyBS08N1;ykR5k-IykQPod4pnM>6U5rNf-qBK(=@*O_d?M?orBxsvjB2ldW@^FZTzpF?q*sp3n|m>3Soy!5))s_>pD5s>X88PbR(SV3fC`e!VdzC3czoERHBkg-TBuuH z7c81Z{S>iIfYPJ`O8h@Tog&t(u+vq@8!E`In}Xi_hEW78X$e~T7Es|RbeyaJnae!vm1bz@B?9% zibayUN#TE(PQnU01m8O8U=8^ZUky7TlZPjmY1z0D!sTGBfK&|{YAUC<@I4QccW+M~$R`yW2586Q}~ zZk_$*xqwBl@XPAvo{&W`rkEXo{dI#pSEW}mX8w}BqE8v)#&)}n*xooSIk`TqCHO8- z8rzy&rz*vvL*)H9$;%p^@qH=-0As!SnHffQQ$rSI@Wh>DKD_O#Q+ew&j{{Urfl|CW{pZZHxi|a+@~Ltra=Fre zRkBzzd}JQU$6{ibk%KyzOu4Y^FursoK`{daqTD;sA(c<-!M`ry=dbYvM?|vSoXg#7 zHEj^&hW+@$=N-Ru;;}z7hCNo0{;}G@k!T?ich(hFW?wlr)?qruLEj$eiM^~Tuicbm z{HosRvf-R1d~r?15s+UQ?|fw8!NyXBC(7$Fv9Rui)J5?Vqc*ph7%ur3%S30&+7>xf z=TD~Up9|KpZ%ym?q?&biLd9;H{(QAP;E+*YuwC8YG61_JagZm`^u(Aqjw$@kRo8r2 z@ecl4)Re#XB%vaH7o=SaezKnPd6vO@8H0dXdz0Y{=X0s;a=9Foh$x76rI+E9EFH-yF)#{GA(?i)^Uki#Et7YOW;Db)Jns1E__Kx@tMw}G!y&L`ncxi zgx)mRVuxr^_a$%Bqi@Lzi@l zb1F(_ylzLaI5`MG&l2!E2;;kK%kS|9GGtJ>_Af%8p5P*pZh^34=1TQW&!TTtYXlCG zw7Prcz5CcD-h1YLS0eN}vt=P9sGE@v!zr@}kKUSN_T z*b|2XlZDIgG|`=_vnr#rPmXX#Tg-Z8hy1EnQ<39U24!egYfoaguhu}T#exMbZIn6` zRcornxzf|vO4pj{@yP3Aa-HErn(1^y)6F`&xu*f&Q?2ra#O7I!TO738y3q>EWl*vV z#_%@2c$pskV1(?e1hkD{OM)G5fA3bOyw%CBaZWsq2=lrV`1IUuR2B6gt|#dOn&g`LHUMZz$6c=hQ|1Vai#1AR) z?-POJ#J$^_{6}c!{@AegX!v!9ic)IfUs2)j#-VW5x`$5qK2Xr0M67ODYF>S&%#Lo9PYv4-0!}<9&T#`QGnoVI{#NP=LDwdmw|GHunpd~srX9ZN#Q--Elggvbk-zP zJ=z4@61TWQrsO16*%EKz2jqD%|4TUnoyBc8g?V%$nBihmJpGPY1xf7=S!Vq?wpMiG z2uXnPC|mGC^X`Q8%;I2@}v4ETC4q3v~Ha zso-2BK!!X3)*yRRPlhbs{)La_ZfsK;u*I7-n^mWzrUqhX9GJm=V*DDq zn=6vPa+D^Wg#I1{t`LZ$)PdkIPDn#Esy9V5chR8R_w`AOZxg1@C_!${-)|OJBfCR% z`1ghhMK$^5W4<*VgX}Lq)US&>*@S(-2WvkP5?rgb0jYCB_I?5Ew+wC5U-4jiZ3B+r zjI+AvmV(USvn9lVXK4j>!PN>==0A;opms%c_OX=`oZX3!RfDb%L2-JA_HG$u_)d`T zUdz>68u?kHphcUQyjiIs;tWJe8%r&`Gj11@6^sU4Yz z2!v{@2epIAj6$U&*= z39ftN%(Ln)U%$CYXhn=9cVNvejpS>m<(k^oUn%{3I{<~Ulhcql%sw1M=iR>iz4!rHVa={i z-$j4{*_vDx+C(IeJ2NtJ1D|~51|A@`Bm;j^`wr zw6??w6ENG>uKD%pQhKh58*kJlOh7M7eJ;kh=!gJ|G!9Y@?{B;5;rmX9yg_|~MuwWc zn9QuTEV>NMrp0a8;6w@Kd2_RR1HNV2h1im8L5{FK1yD@8Vr_m;F`pHC-L zcH~vhW;4gq?VW@w0^@v3elLA->vr3m(3ccRf8N<@Rxr7)du}P3+4l$QCM)1ckj#F6 zt?JRX2tM1`rxfwC6O@K;M`&F?eX`$SqMF8XfJU~GPe%i3Wp)R|>vhWw6dvg2yg4&Q zPifm~Y*9*&$v%74FvP&x45UaR9tO5hUIiK)EhOHRM{w2?)0ul%I$X|ILWbwauCZ>$yn7xn3Li`3}q9b#=QA8r)sVi zw?WhrNhoH!aJNe1ocaT=j~&*Qcw z0L290fmiVC$HtUCFp4@`=D*Nj;bF605ve!NCs>YvxHUGBT2MoOcnFq8x{;iT@D_@@ zqXA9ers>|XqtCAm^9Ke>Z+b?Xh66PLBQx!>B0js_+HA6KVmI^SCQXotpW_aAHVYI) zF)(}_fO#(WNRPwmcTkE4eC^f0Ax;_YDJ<_(HT5@usN$5qOjMt|zHM=8Hn52~Mi-fL z72I~3SeOeeKXL+QAMEy?j#xjqC_79YdlF&RAFz(`|6-;K0f~eh>SO}*t#QL&5lYrO z0Ej5|wQ=&yDle0P)Kv(?c5d{Sz$M|OGyOxM(FHh7q#J6_6~z>()Ant}Tk>)KD>5me z>|TR_996-t=BDR9Tv$XDjYE{3V{B}V{(mYGSHk@)%bLa&(=p?yWv;|+(`<%hkCl89J#Z!u@A z;Eee$aib{J*OUi*wQNI8fkCBzFH{T_##;~+i+uo_G>!N~cHhM_#X79f;fAoi%X46+ z)BL4PB#UGpuDfaTJg;2rHh(15U}1jiTq>sUL!-t2rZVb2s!j@wzN`sY@_PRS;||xK z#>xN}WMDmt#256~^i=XqHN6il73lKq%hr{1ipaNocj-R1lIDk2aONb>R)^XuQH*YmV&Ta|~NqPwMT2njXx%#O)7BUTrY;2x#S7$I0ssQKl z%!Yo%5DO$_2%?NwwfE21qmLK$fhg>}m;G@2O49`K1E4L&H?mYx0xC1<=QAYC?p9A- z7(wc(ALGh4QZElJU+gZ~gH7@K9q&Gp3O{M2#`7df1I?dXTXtW?_DHgH#=rJslnZta zpK!24%`JD9Fd0(0RSR~Vb}vMxG*kR63R7O*WI9TmdvU}il1>k`JQug^`}_u@??|TfHdn{= zk_dY6>n7?NP*A92LpS`;V1?Cq&4>B12r&NxUA^{s2p16|E8$|sT^xc?WV{Wbrrpa5t7Ldtct1^%NOT=)cVXuDg(XUe> zXyM@G@~xmZ4vmr@w3pYakJmtYT0omB!C3}^of#Y4&$}~%whWhREvF>4pDU~B2s(wm z(cE3FVGavh4-*3qv|fI&%&ki@#N6+1gN(|P+5Xaw;+No^k=6qp0$X6a*V|K;jL*hx z9$A@LJpOO%4WM%m+VqQG!%ejYPJg)y)4@`2%o$p{IX{X`;jo(v~GM?<| znk-nPcH>&~OI|rkpJ2a${rxD>Bt|bQWv-I9s)tgy7V67@1w8NL!#u8G6o(q2Q+~BP zfJ~8-S7lIp_c?#ee{WKg!v(Jk&pu@sq$AXEO?IXkX+14?rd;0tzW%}xx&W)LudFf( U&hXf%$Ocu-8hTG2sKdM0T#Z%4cmMzZ diff --git a/systems/stronghold/configuration.nix b/systems/stronghold/configuration.nix new file mode 100644 index 0000000..fe588c4 --- /dev/null +++ b/systems/stronghold/configuration.nix @@ -0,0 +1,73 @@ +{ pkgs, ... }: { + imports = [ + # Core Features + ../../nixos/features/base.nix + ../../nixos/features/tui-apps.nix + ../../nixos/features/openssh-server.nix + + # Core Tweaks + ../../nixos/tweaks/zram.nix + ../../nixos/tweaks/enable_flakes.nix + ../../nixos/tweaks/disable_nixos_user.nix + ../../nixos/tweaks/systemd-resolved_nonsense.nix + + # Lauren Base + ../../users/lauren_lagarde/lauren_lagarde.nix + + # Dotspace + ../../secrets/dotspace.nix + ../../nixos/features/stronghold-binary-cache.nix + + # Docker Host Stuff + ../../nixos/tweaks/disable_firewall.nix + ../../nixos/features/virtualization/docker.nix + ../../nixos/features/virtualization/dockge.nix + + # UEFI SSH ZFS + #../../nixos/tweaks/zfs.nix + #../../nixos/features/initrd-ssh.nix + #../../nixos/features/virtualization/libvirt-guest-uefi.nix + + #../../nixos/disko/libvirt/uefi-zfs-base.nix + #../../nixos/disko/libvirt/zfs-encrypted.nix + ]; + + ############################################################################## + ############################################################################## + ############################################################################## + # Networking + + # To generate keys: + # sudo mkdir -p /root/wireguard && wg genkey | sudo tee /root/wireguard/dotspace.priv | wg pubkey + networking.wireguard.enable = true; + networking.wireguard.interfaces."wg.dotspace" = { + ips = [ "10.13.13.2" ]; + listenPort = 51820; + privateKeyFile = "/root/wireguard/dotspace.priv"; + }; + + systemd.network = { + networks = { + "90-tinc-dotspace" = { + matchConfig.Name = "tinc.dotspace"; + address = [ "10.86.84.3/32" ]; + routes = [ { Destination = "10.86.84.0/24"; } ]; + }; + }; + }; + + # To Generate Keys: + # sudo tinc -b -n dotspace generate-ed25519-keys; cat /etc/tinc/dotspace/hosts/$(hostname) | grep "^Ed" + services.tinc.networks.dotspace = { + name = "stronghold"; + ed25519PrivateKeyFile = "/etc/tinc/dotspace/ed25519_key.priv"; + + chroot = false; + settings.ConnectTo = [ "fortress" "citadel" ]; + }; + + ############################################################################## + ############################################################################## + ############################################################################## + # Services +} diff --git a/systems/vm-docker-host/vm-docker-host-zfs.nix b/systems/vm-docker-host/vm-docker-host-zfs.nix index 20df804..957ecc5 100644 --- a/systems/vm-docker-host/vm-docker-host-zfs.nix +++ b/systems/vm-docker-host/vm-docker-host-zfs.nix @@ -14,6 +14,4 @@ ../../disko/libvirt/zfs-mirror.nix ../../disko/libvirt/zfs-encrypted.nix ]; - - boot.supportedFilesystems = [ "zfs" ]; } diff --git a/vm.sh b/vm.sh new file mode 100755 index 0000000..343b3c0 --- /dev/null +++ b/vm.sh @@ -0,0 +1 @@ +nixos-rebuild build-vm --flake ".#$1" && "./result/bin/run-$1-vm" #-nographic