Move common host features to features-nixos folder
This commit is contained in:
@@ -5,7 +5,7 @@ keys:
|
||||
- &kardorf-ssh age15lxw97z03q40xrdscnxqqugh5ky5aqrerg2t2rphkcqm6rnllurq8v98q5
|
||||
|
||||
creation_rules:
|
||||
- path_regex: hosts/common/secrets.yaml$
|
||||
- path_regex: hosts/secrets-common.yaml$
|
||||
key_groups:
|
||||
- age:
|
||||
- *primary
|
||||
|
||||
@@ -1,4 +1,5 @@
|
||||
{
|
||||
self,
|
||||
inputs,
|
||||
config,
|
||||
...
|
||||
@@ -18,5 +19,5 @@ in {
|
||||
generateKey = false; # TODO: building should not work without secrets!?
|
||||
};
|
||||
|
||||
sops.defaultSopsFile = ../secrets.yaml;
|
||||
sops.defaultSopsFile = "${self}/hosts/secrets-common.yaml";
|
||||
}
|
||||
@@ -1,4 +1,5 @@
|
||||
{
|
||||
self,
|
||||
pkgs,
|
||||
config,
|
||||
lib,
|
||||
@@ -29,7 +30,7 @@ in {
|
||||
];
|
||||
|
||||
openssh.authorizedKeys.keys = lib.splitString "\n" (
|
||||
builtins.readFile ../../../../homes/julian/ssh.pub
|
||||
builtins.readFile ./ssh.pub
|
||||
);
|
||||
# hashedPasswordFile = config.sops.secrets.julian-password.path;
|
||||
hashedPassword = "$y$j9T$N33kLJQbV8soUoCbDkpwA1$r/yahJDgOPo4GGOrAi6BUG5zLTzmaBrA5NQ4nno561A";
|
||||
@@ -44,7 +45,7 @@ in {
|
||||
neededForUsers = true;
|
||||
};
|
||||
|
||||
home-manager.users.julian = import ../../../../homes/julian/${config.networking.hostName}.nix;
|
||||
home-manager.users.julian = import "${self}/homes/julian/${config.networking.hostName}.nix";
|
||||
|
||||
security.pam.services.swaylock = {}; # Make swaylock unlocking work
|
||||
}
|
||||
@@ -1,28 +1,28 @@
|
||||
{
|
||||
{self, ...}: {
|
||||
imports = [
|
||||
./hardware-configuration.nix
|
||||
|
||||
../common/global
|
||||
../common/users/julian
|
||||
../common/optional/binarycaches.nix
|
||||
"${self}/features-nixos/global"
|
||||
"${self}/features-nixos/users/julian"
|
||||
"${self}/features-nixos/optional/binarycaches.nix"
|
||||
|
||||
../common/optional/remote-builder.nix
|
||||
../common/optional/boot-efi.nix
|
||||
"${self}/features-nixos/optional/remote-builder.nix"
|
||||
"${self}/features-nixos/optional/boot-efi.nix"
|
||||
|
||||
../common/optional/greetd.nix
|
||||
../common/optional/authentication.nix
|
||||
../common/optional/pcmanfm.nix
|
||||
../common/optional/pipewire.nix
|
||||
"${self}/features-nixos/optional/greetd.nix"
|
||||
"${self}/features-nixos/optional/authentication.nix"
|
||||
"${self}/features-nixos/optional/pcmanfm.nix"
|
||||
"${self}/features-nixos/optional/pipewire.nix"
|
||||
|
||||
../common/optional/gamemode.nix
|
||||
../common/optional/virtualbox.nix
|
||||
"${self}/features-nixos/optional/gamemode.nix"
|
||||
"${self}/features-nixos/optional/virtualbox.nix"
|
||||
|
||||
../common/optional/podman.nix
|
||||
../common/optional/wireguard.nix
|
||||
../common/optional/wireshark.nix
|
||||
../common/optional/flatpak.nix
|
||||
"${self}/features-nixos/optional/podman.nix"
|
||||
"${self}/features-nixos/optional/wireguard.nix"
|
||||
"${self}/features-nixos/optional/wireshark.nix"
|
||||
"${self}/features-nixos/optional/flatpak.nix"
|
||||
|
||||
../common/optional/avahi.nix
|
||||
"${self}/features-nixos/optional/avahi.nix"
|
||||
];
|
||||
|
||||
networking.hostName = "aspi";
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
# or
|
||||
# deploy .#builder
|
||||
{
|
||||
self,
|
||||
config,
|
||||
pkgs,
|
||||
...
|
||||
@@ -9,11 +10,11 @@
|
||||
imports = [
|
||||
./hardware-configuration.nix
|
||||
|
||||
../common/global/fish.nix # fish for admin
|
||||
../common/global/locale.nix
|
||||
../common/global/nix.nix
|
||||
../common/global/sops.nix
|
||||
../common/global/root.nix
|
||||
"${self}/features-nixos/global/fish.nix" # fish for admin
|
||||
"${self}/features-nixos/global/locale.nix"
|
||||
"${self}/features-nixos/global/nix.nix"
|
||||
"${self}/features-nixos/global/sops.nix"
|
||||
"${self}/features-nixos/global/root.nix"
|
||||
];
|
||||
|
||||
networking.hostName = "builder";
|
||||
|
||||
@@ -1,30 +1,31 @@
|
||||
{pkgs, ...}: {
|
||||
{
|
||||
self,
|
||||
pkgs,
|
||||
...
|
||||
}: {
|
||||
imports = [
|
||||
./hardware-configuration.nix
|
||||
|
||||
../common/global
|
||||
../common/users/julian
|
||||
../common/users/wolfi
|
||||
../common/optional/binarycaches.nix
|
||||
"${self}/features-nixos/global"
|
||||
"${self}/features-nixos/users/julian"
|
||||
"${self}/features-nixos/users/wolfi"
|
||||
"${self}/features-nixos/optional/binarycaches.nix"
|
||||
|
||||
# ../common/optional/xserver.nix
|
||||
../common/optional/remote-builder.nix
|
||||
../common/optional/boot-efi.nix
|
||||
"${self}/features-nixos/optional/remote-builder.nix"
|
||||
"${self}/features-nixos/optional/boot-efi.nix"
|
||||
|
||||
../common/optional/greetd.nix
|
||||
../common/optional/authentication.nix
|
||||
../common/optional/pcmanfm.nix
|
||||
../common/optional/pipewire.nix
|
||||
"${self}/features-nixos/optional/greetd.nix"
|
||||
"${self}/features-nixos/optional/authentication.nix"
|
||||
"${self}/features-nixos/optional/pcmanfm.nix"
|
||||
"${self}/features-nixos/optional/pipewire.nix"
|
||||
|
||||
../common/optional/virtualbox.nix
|
||||
"${self}/features-nixos/optional/openssh.nix"
|
||||
|
||||
# ../common/optional/gdm.nix
|
||||
# ../common/optional/i3.nix
|
||||
"${self}/features-nixos/optional/virtualbox.nix"
|
||||
|
||||
../common/optional/openssh.nix
|
||||
|
||||
../common/optional/podman.nix
|
||||
../common/optional/flatpak.nix
|
||||
"${self}/features-nixos/optional/podman.nix"
|
||||
"${self}/features-nixos/optional/wireshark.nix"
|
||||
"${self}/features-nixos/optional/flatpak.nix"
|
||||
];
|
||||
|
||||
networking.hostName = "kardorf";
|
||||
|
||||
Reference in New Issue
Block a user