Move common host features to features-nixos folder
This commit is contained in:
@@ -5,7 +5,7 @@ keys:
|
|||||||
- &kardorf-ssh age15lxw97z03q40xrdscnxqqugh5ky5aqrerg2t2rphkcqm6rnllurq8v98q5
|
- &kardorf-ssh age15lxw97z03q40xrdscnxqqugh5ky5aqrerg2t2rphkcqm6rnllurq8v98q5
|
||||||
|
|
||||||
creation_rules:
|
creation_rules:
|
||||||
- path_regex: hosts/common/secrets.yaml$
|
- path_regex: hosts/secrets-common.yaml$
|
||||||
key_groups:
|
key_groups:
|
||||||
- age:
|
- age:
|
||||||
- *primary
|
- *primary
|
||||||
|
|||||||
@@ -1,4 +1,5 @@
|
|||||||
{
|
{
|
||||||
|
self,
|
||||||
inputs,
|
inputs,
|
||||||
config,
|
config,
|
||||||
...
|
...
|
||||||
@@ -18,5 +19,5 @@ in {
|
|||||||
generateKey = false; # TODO: building should not work without secrets!?
|
generateKey = false; # TODO: building should not work without secrets!?
|
||||||
};
|
};
|
||||||
|
|
||||||
sops.defaultSopsFile = ../secrets.yaml;
|
sops.defaultSopsFile = "${self}/hosts/secrets-common.yaml";
|
||||||
}
|
}
|
||||||
@@ -1,4 +1,5 @@
|
|||||||
{
|
{
|
||||||
|
self,
|
||||||
pkgs,
|
pkgs,
|
||||||
config,
|
config,
|
||||||
lib,
|
lib,
|
||||||
@@ -29,7 +30,7 @@ in {
|
|||||||
];
|
];
|
||||||
|
|
||||||
openssh.authorizedKeys.keys = lib.splitString "\n" (
|
openssh.authorizedKeys.keys = lib.splitString "\n" (
|
||||||
builtins.readFile ../../../../homes/julian/ssh.pub
|
builtins.readFile ./ssh.pub
|
||||||
);
|
);
|
||||||
# hashedPasswordFile = config.sops.secrets.julian-password.path;
|
# hashedPasswordFile = config.sops.secrets.julian-password.path;
|
||||||
hashedPassword = "$y$j9T$N33kLJQbV8soUoCbDkpwA1$r/yahJDgOPo4GGOrAi6BUG5zLTzmaBrA5NQ4nno561A";
|
hashedPassword = "$y$j9T$N33kLJQbV8soUoCbDkpwA1$r/yahJDgOPo4GGOrAi6BUG5zLTzmaBrA5NQ4nno561A";
|
||||||
@@ -44,7 +45,7 @@ in {
|
|||||||
neededForUsers = true;
|
neededForUsers = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
home-manager.users.julian = import ../../../../homes/julian/${config.networking.hostName}.nix;
|
home-manager.users.julian = import "${self}/homes/julian/${config.networking.hostName}.nix";
|
||||||
|
|
||||||
security.pam.services.swaylock = {}; # Make swaylock unlocking work
|
security.pam.services.swaylock = {}; # Make swaylock unlocking work
|
||||||
}
|
}
|
||||||
@@ -1,28 +1,28 @@
|
|||||||
{
|
{self, ...}: {
|
||||||
imports = [
|
imports = [
|
||||||
./hardware-configuration.nix
|
./hardware-configuration.nix
|
||||||
|
|
||||||
../common/global
|
"${self}/features-nixos/global"
|
||||||
../common/users/julian
|
"${self}/features-nixos/users/julian"
|
||||||
../common/optional/binarycaches.nix
|
"${self}/features-nixos/optional/binarycaches.nix"
|
||||||
|
|
||||||
../common/optional/remote-builder.nix
|
"${self}/features-nixos/optional/remote-builder.nix"
|
||||||
../common/optional/boot-efi.nix
|
"${self}/features-nixos/optional/boot-efi.nix"
|
||||||
|
|
||||||
../common/optional/greetd.nix
|
"${self}/features-nixos/optional/greetd.nix"
|
||||||
../common/optional/authentication.nix
|
"${self}/features-nixos/optional/authentication.nix"
|
||||||
../common/optional/pcmanfm.nix
|
"${self}/features-nixos/optional/pcmanfm.nix"
|
||||||
../common/optional/pipewire.nix
|
"${self}/features-nixos/optional/pipewire.nix"
|
||||||
|
|
||||||
../common/optional/gamemode.nix
|
"${self}/features-nixos/optional/gamemode.nix"
|
||||||
../common/optional/virtualbox.nix
|
"${self}/features-nixos/optional/virtualbox.nix"
|
||||||
|
|
||||||
../common/optional/podman.nix
|
"${self}/features-nixos/optional/podman.nix"
|
||||||
../common/optional/wireguard.nix
|
"${self}/features-nixos/optional/wireguard.nix"
|
||||||
../common/optional/wireshark.nix
|
"${self}/features-nixos/optional/wireshark.nix"
|
||||||
../common/optional/flatpak.nix
|
"${self}/features-nixos/optional/flatpak.nix"
|
||||||
|
|
||||||
../common/optional/avahi.nix
|
"${self}/features-nixos/optional/avahi.nix"
|
||||||
];
|
];
|
||||||
|
|
||||||
networking.hostName = "aspi";
|
networking.hostName = "aspi";
|
||||||
|
|||||||
@@ -2,6 +2,7 @@
|
|||||||
# or
|
# or
|
||||||
# deploy .#builder
|
# deploy .#builder
|
||||||
{
|
{
|
||||||
|
self,
|
||||||
config,
|
config,
|
||||||
pkgs,
|
pkgs,
|
||||||
...
|
...
|
||||||
@@ -9,11 +10,11 @@
|
|||||||
imports = [
|
imports = [
|
||||||
./hardware-configuration.nix
|
./hardware-configuration.nix
|
||||||
|
|
||||||
../common/global/fish.nix # fish for admin
|
"${self}/features-nixos/global/fish.nix" # fish for admin
|
||||||
../common/global/locale.nix
|
"${self}/features-nixos/global/locale.nix"
|
||||||
../common/global/nix.nix
|
"${self}/features-nixos/global/nix.nix"
|
||||||
../common/global/sops.nix
|
"${self}/features-nixos/global/sops.nix"
|
||||||
../common/global/root.nix
|
"${self}/features-nixos/global/root.nix"
|
||||||
];
|
];
|
||||||
|
|
||||||
networking.hostName = "builder";
|
networking.hostName = "builder";
|
||||||
|
|||||||
@@ -1,30 +1,31 @@
|
|||||||
{pkgs, ...}: {
|
{
|
||||||
|
self,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
imports = [
|
imports = [
|
||||||
./hardware-configuration.nix
|
./hardware-configuration.nix
|
||||||
|
|
||||||
../common/global
|
"${self}/features-nixos/global"
|
||||||
../common/users/julian
|
"${self}/features-nixos/users/julian"
|
||||||
../common/users/wolfi
|
"${self}/features-nixos/users/wolfi"
|
||||||
../common/optional/binarycaches.nix
|
"${self}/features-nixos/optional/binarycaches.nix"
|
||||||
|
|
||||||
# ../common/optional/xserver.nix
|
"${self}/features-nixos/optional/remote-builder.nix"
|
||||||
../common/optional/remote-builder.nix
|
"${self}/features-nixos/optional/boot-efi.nix"
|
||||||
../common/optional/boot-efi.nix
|
|
||||||
|
|
||||||
../common/optional/greetd.nix
|
"${self}/features-nixos/optional/greetd.nix"
|
||||||
../common/optional/authentication.nix
|
"${self}/features-nixos/optional/authentication.nix"
|
||||||
../common/optional/pcmanfm.nix
|
"${self}/features-nixos/optional/pcmanfm.nix"
|
||||||
../common/optional/pipewire.nix
|
"${self}/features-nixos/optional/pipewire.nix"
|
||||||
|
|
||||||
../common/optional/virtualbox.nix
|
"${self}/features-nixos/optional/openssh.nix"
|
||||||
|
|
||||||
# ../common/optional/gdm.nix
|
"${self}/features-nixos/optional/virtualbox.nix"
|
||||||
# ../common/optional/i3.nix
|
|
||||||
|
|
||||||
../common/optional/openssh.nix
|
"${self}/features-nixos/optional/podman.nix"
|
||||||
|
"${self}/features-nixos/optional/wireshark.nix"
|
||||||
../common/optional/podman.nix
|
"${self}/features-nixos/optional/flatpak.nix"
|
||||||
../common/optional/flatpak.nix
|
|
||||||
];
|
];
|
||||||
|
|
||||||
networking.hostName = "kardorf";
|
networking.hostName = "kardorf";
|
||||||
|
|||||||
Reference in New Issue
Block a user