269 lines
8.6 KiB
Nix
269 lines
8.6 KiB
Nix
# https://nix.dev/
|
|
# https://github.com/barrucadu/nixfiles/tree/master
|
|
# https://bitbucket.org/bzz/nixos/src/master/configuration.nix
|
|
# https://grahamc.com/blog/erase-your-darlings/
|
|
# https://github.com/Misterio77/nix-starter-configs
|
|
|
|
## Update Packages
|
|
# nix flake update
|
|
|
|
## Clean up nix-store
|
|
# nix-store --delete ...
|
|
|
|
## Encrypted Home Directory
|
|
# https://github.com/nix-community/home-manager/issues/3415
|
|
|
|
## Declarative Disk Partioning
|
|
# https://github.com/nix-community/nixos-anywhere-examples/blob/main/configuration.nix
|
|
|
|
{
|
|
description = "Lauren's System Flake";
|
|
|
|
inputs = {
|
|
nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.11";
|
|
nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable";
|
|
|
|
# Lix over Nix
|
|
lix-module.url = "https://git.lix.systems/lix-project/nixos-module/archive/2.91.1-2.tar.gz";
|
|
lix-module.inputs.nixpkgs.follows = "nixpkgs";
|
|
|
|
# Installers
|
|
disko.url = "github:nix-community/disko/v1.11.0";
|
|
nixos-generators.url = "github:nix-community/nixos-generators/7c60ba4bc8d6aa2ba3e5b0f6ceb9fc07bc261565";
|
|
nixos-generators.inputs.nixpkgs.follows = "nixpkgs";
|
|
|
|
# Home Manager
|
|
home-manager.url = "github:nix-community/home-manager/release-24.11";
|
|
home-manager.inputs.nixpkgs.follows = "nixpkgs";
|
|
|
|
mlaga97-home-manager.url = "./modules/mlaga97-home-manager/";
|
|
|
|
# Extras
|
|
waveforms.url = "github:liff/waveforms-flake";
|
|
};
|
|
|
|
outputs = { self, nixpkgs, nixpkgs-unstable, home-manager, nixos-generators, disko, waveforms, lix-module, ... }@inputs: let
|
|
system = "x86_64-linux";
|
|
timezone = "America/Chicago";
|
|
locale = "en_US.UTF-8";
|
|
stateVersion = "24.11";
|
|
|
|
pkgs = import nixpkgs {inherit system; };
|
|
pkgs-unstable = import nixpkgs-unstable {
|
|
inherit system;
|
|
config.allowUnfree = true;
|
|
};
|
|
|
|
iso_modules = [
|
|
"${nixpkgs}/nixos/modules/installer/cd-dvd/iso-image.nix"
|
|
{ isoImage.squashfsCompression = "zstd"; }
|
|
];
|
|
|
|
# Look into: https://git.sr.ht/~magic_rb/dotfiles/tree/master/item/nixos/systems/gooseberry
|
|
pi_modules = [{
|
|
# Disabling the whole `profiles/base.nix` module, which is responsible
|
|
# for adding ZFS and a bunch of other unnecessary programs:
|
|
disabledModules = [
|
|
"profiles/base.nix"
|
|
];
|
|
|
|
# Allows for remote deployment via
|
|
# nixos-rebuild -L switch --flake .?submodules=1#HOSTNAME --target-host USER@HOSTNAME
|
|
nix.settings.require-sigs = false;
|
|
}];
|
|
|
|
# TODO: Surely a better way, no?
|
|
inherited_modules = [
|
|
{
|
|
time.timeZone = timezone;
|
|
system.stateVersion = stateVersion;
|
|
}
|
|
|
|
lix-module.nixosModules.default
|
|
home-manager.nixosModules.home-manager
|
|
waveforms.nixosModule
|
|
disko.nixosModules.default
|
|
];
|
|
in {
|
|
nixosConfigurations = {
|
|
ll-latitude-e5591 = nixpkgs.lib.nixosSystem {
|
|
system = "x86_64-linux";
|
|
modules = [
|
|
{
|
|
networking.hostName = "ll-latitude-e5591";
|
|
networking.hostId = "f55542ee";
|
|
}
|
|
./systems/ll-latitude-e5591.nix
|
|
./disko/nvme/uefi-luks-lvm-ext4.nix
|
|
] ++ inherited_modules;
|
|
specialArgs = { inherit inputs pkgs-unstable; };
|
|
};
|
|
|
|
ll-nixos-headless-pi = nixpkgs.lib.nixosSystem {
|
|
system = "aarch64-linux";
|
|
modules = pi_modules ++ [
|
|
{
|
|
networking.hostName = "ll-nixos-headless-pi";
|
|
|
|
boot.loader.grub.enable = false;
|
|
boot.loader.generic-extlinux-compatible.enable = true;
|
|
|
|
fileSystems = {
|
|
"/" = {
|
|
device = "/dev/disk/by-label/NIXOS_SD";
|
|
fsType = "ext4";
|
|
};
|
|
|
|
"/boot/firmware" = {
|
|
device = "/dev/disk/by-label/FIRMWARE";
|
|
fsType = "vfat";
|
|
};
|
|
};
|
|
}
|
|
./systems/ll-nixos-headless.nix
|
|
] ++ inherited_modules;
|
|
specialArgs = { inherit inputs pkgs-unstable; };
|
|
};
|
|
|
|
ll-nixos-base = nixpkgs.lib.nixosSystem {
|
|
system = "x86_64-linux";
|
|
modules = iso_modules ++ [
|
|
{
|
|
networking.hostName = "ll-nixos-base";
|
|
home-manager.users."lauren_lagarde" = { config, ... }: {
|
|
imports = inputs.mlaga97-home-manager.homeManagerModules."lauren_lagarde@ll-latitude-e5591";
|
|
};
|
|
}
|
|
./systems/ll-nixos-base.nix
|
|
] ++ inherited_modules;
|
|
|
|
specialArgs = { inherit inputs pkgs-unstable; };
|
|
};
|
|
|
|
# Real Systems
|
|
bastion-in-training = nixpkgs.lib.nixosSystem {
|
|
system = "x86_64-linux";
|
|
modules = [ ./systems/bastion/bastion-in-training.nix ] ++ inherited_modules;
|
|
};
|
|
bastion = nixpkgs.lib.nixosSystem {
|
|
system = "x86_64-linux";
|
|
modules = [ ./systems/bastion/bastion-actual.nix ] ++ inherited_modules;
|
|
};
|
|
|
|
stronghold = nixpkgs.lib.nixosSystem {
|
|
system = "x86_64-linux";
|
|
modules = [
|
|
{
|
|
networking.hostName = "stronghold";
|
|
networking.hostId = "c581a1cd";
|
|
}
|
|
./systems/vm-docker-base.nix
|
|
] ++ inherited_modules;
|
|
};
|
|
|
|
vm-docker-luks-test = nixpkgs.lib.nixosSystem {
|
|
system = "x86_64-linux";
|
|
modules = [
|
|
{
|
|
networking.hostName = "vm-docker-luks-test";
|
|
networking.hostId = "1b5432b7";
|
|
}
|
|
./systems/vm-docker-luks.nix
|
|
] ++ inherited_modules;
|
|
};
|
|
};
|
|
|
|
packages.aarch64-linux = {
|
|
ll-nixos-headless-pi-sdcard = nixos-generators.nixosGenerate {
|
|
system = "aarch64-linux";
|
|
format = "sd-aarch64";
|
|
modules = pi_modules ++ [
|
|
{ networking.hostName = "ll-nixos-headless-pi"; }
|
|
./systems/ll-nixos-headless.nix
|
|
] ++ inherited_modules;
|
|
specialArgs = { inherit inputs pkgs-unstable; };
|
|
};
|
|
|
|
token-pi-sdcard = nixos-generators.nixosGenerate {
|
|
system = "aarch64-linux";
|
|
format = "sd-aarch64";
|
|
modules = pi_modules ++ [
|
|
{ networking.hostName = "token-pi"; }
|
|
./systems/ll-nixos-headless.nix
|
|
] ++ inherited_modules;
|
|
specialArgs = { inherit inputs pkgs-unstable; };
|
|
};
|
|
};
|
|
|
|
packages.x86_64-linux = {
|
|
|
|
##########################################################################
|
|
##########################################################################
|
|
##########################################################################
|
|
# Personal Live Disks
|
|
|
|
# TODO: ll-nixos-headless-iso = nixos-generators.nixosGenerate {};
|
|
|
|
ll-nixos-base-iso = nixos-generators.nixosGenerate {
|
|
system = "x86_64-linux";
|
|
modules = iso_modules ++ [
|
|
{
|
|
networking.hostName = "ll-nixos";
|
|
home-manager.users."lauren_lagarde" = { config, ... }: {
|
|
imports = inputs.mlaga97-home-manager.homeManagerModules."lauren_lagarde@ll-latitude-e5591";
|
|
};
|
|
}
|
|
./systems/ll-nixos-base.nix
|
|
] ++ inherited_modules;
|
|
specialArgs = {
|
|
inherit inputs pkgs-unstable;
|
|
};
|
|
format = "install-iso";
|
|
};
|
|
|
|
ll-nixos-full-iso = nixos-generators.nixosGenerate {
|
|
system = "x86_64-linux";
|
|
modules = iso_modules ++ [
|
|
{
|
|
networking.hostName = "ll-nixos";
|
|
home-manager.users."lauren_lagarde" = { config, ... }: {
|
|
imports = inputs.mlaga97-home-manager.homeManagerModules."lauren_lagarde@ll-latitude-e5591";
|
|
};
|
|
}
|
|
./systems/ll-nixos-full.nix
|
|
] ++ inherited_modules;
|
|
specialArgs = {
|
|
inherit inputs pkgs-unstable;
|
|
};
|
|
format = "install-iso";
|
|
};
|
|
|
|
ll-nixos-xmrig-worker-iso = nixos-generators.nixosGenerate {
|
|
system = "x86_64-linux";
|
|
modules = iso_modules ++ [
|
|
{ networking.hostName = "ll-nixos-xmrig-worker"; }
|
|
./systems/ll-nixos-xmrig-worker.nix
|
|
] ++ inherited_modules;
|
|
format = "install-iso";
|
|
};
|
|
|
|
##########################################################################
|
|
##########################################################################
|
|
##########################################################################
|
|
# Systems
|
|
|
|
living-room-nixos-iso = nixos-generators.nixosGenerate {
|
|
system = "x86_64-linux";
|
|
modules = iso_modules ++ [
|
|
{ networking.hostName = "living-room-nixos-iso"; }
|
|
./systems/living-room-nixos.nix
|
|
] ++ inherited_modules;
|
|
format = "install-iso";
|
|
specialArgs = { inherit inputs pkgs-unstable; };
|
|
};
|
|
|
|
default = self.packages.x86_64-linux.ll-nixos-full-iso;
|
|
};
|
|
};
|
|
}
|