Move common host features to features-nixos folder

This commit is contained in:
2026-03-23 20:57:12 +01:00
parent b31791b9ef
commit eec600d1d0
37 changed files with 49 additions and 45 deletions

View File

@@ -5,7 +5,7 @@ keys:
- &kardorf-ssh age15lxw97z03q40xrdscnxqqugh5ky5aqrerg2t2rphkcqm6rnllurq8v98q5 - &kardorf-ssh age15lxw97z03q40xrdscnxqqugh5ky5aqrerg2t2rphkcqm6rnllurq8v98q5
creation_rules: creation_rules:
- path_regex: hosts/common/secrets.yaml$ - path_regex: hosts/secrets-common.yaml$
key_groups: key_groups:
- age: - age:
- *primary - *primary

View File

@@ -1,4 +1,5 @@
{ {
self,
inputs, inputs,
config, config,
... ...
@@ -18,5 +19,5 @@ in {
generateKey = false; # TODO: building should not work without secrets!? generateKey = false; # TODO: building should not work without secrets!?
}; };
sops.defaultSopsFile = ../secrets.yaml; sops.defaultSopsFile = "${self}/hosts/secrets-common.yaml";
} }

View File

@@ -1,4 +1,5 @@
{ {
self,
pkgs, pkgs,
config, config,
lib, lib,
@@ -29,7 +30,7 @@ in {
]; ];
openssh.authorizedKeys.keys = lib.splitString "\n" ( openssh.authorizedKeys.keys = lib.splitString "\n" (
builtins.readFile ../../../../homes/julian/ssh.pub builtins.readFile ./ssh.pub
); );
# hashedPasswordFile = config.sops.secrets.julian-password.path; # hashedPasswordFile = config.sops.secrets.julian-password.path;
hashedPassword = "$y$j9T$N33kLJQbV8soUoCbDkpwA1$r/yahJDgOPo4GGOrAi6BUG5zLTzmaBrA5NQ4nno561A"; hashedPassword = "$y$j9T$N33kLJQbV8soUoCbDkpwA1$r/yahJDgOPo4GGOrAi6BUG5zLTzmaBrA5NQ4nno561A";
@@ -44,7 +45,7 @@ in {
neededForUsers = true; neededForUsers = true;
}; };
home-manager.users.julian = import ../../../../homes/julian/${config.networking.hostName}.nix; home-manager.users.julian = import "${self}/homes/julian/${config.networking.hostName}.nix";
security.pam.services.swaylock = {}; # Make swaylock unlocking work security.pam.services.swaylock = {}; # Make swaylock unlocking work
} }

View File

@@ -1,28 +1,28 @@
{ {self, ...}: {
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
../common/global "${self}/features-nixos/global"
../common/users/julian "${self}/features-nixos/users/julian"
../common/optional/binarycaches.nix "${self}/features-nixos/optional/binarycaches.nix"
../common/optional/remote-builder.nix "${self}/features-nixos/optional/remote-builder.nix"
../common/optional/boot-efi.nix "${self}/features-nixos/optional/boot-efi.nix"
../common/optional/greetd.nix "${self}/features-nixos/optional/greetd.nix"
../common/optional/authentication.nix "${self}/features-nixos/optional/authentication.nix"
../common/optional/pcmanfm.nix "${self}/features-nixos/optional/pcmanfm.nix"
../common/optional/pipewire.nix "${self}/features-nixos/optional/pipewire.nix"
../common/optional/gamemode.nix "${self}/features-nixos/optional/gamemode.nix"
../common/optional/virtualbox.nix "${self}/features-nixos/optional/virtualbox.nix"
../common/optional/podman.nix "${self}/features-nixos/optional/podman.nix"
../common/optional/wireguard.nix "${self}/features-nixos/optional/wireguard.nix"
../common/optional/wireshark.nix "${self}/features-nixos/optional/wireshark.nix"
../common/optional/flatpak.nix "${self}/features-nixos/optional/flatpak.nix"
../common/optional/avahi.nix "${self}/features-nixos/optional/avahi.nix"
]; ];
networking.hostName = "aspi"; networking.hostName = "aspi";

View File

@@ -2,6 +2,7 @@
# or # or
# deploy .#builder # deploy .#builder
{ {
self,
config, config,
pkgs, pkgs,
... ...
@@ -9,11 +10,11 @@
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
../common/global/fish.nix # fish for admin "${self}/features-nixos/global/fish.nix" # fish for admin
../common/global/locale.nix "${self}/features-nixos/global/locale.nix"
../common/global/nix.nix "${self}/features-nixos/global/nix.nix"
../common/global/sops.nix "${self}/features-nixos/global/sops.nix"
../common/global/root.nix "${self}/features-nixos/global/root.nix"
]; ];
networking.hostName = "builder"; networking.hostName = "builder";

View File

@@ -1,30 +1,31 @@
{pkgs, ...}: { {
self,
pkgs,
...
}: {
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
../common/global "${self}/features-nixos/global"
../common/users/julian "${self}/features-nixos/users/julian"
../common/users/wolfi "${self}/features-nixos/users/wolfi"
../common/optional/binarycaches.nix "${self}/features-nixos/optional/binarycaches.nix"
# ../common/optional/xserver.nix "${self}/features-nixos/optional/remote-builder.nix"
../common/optional/remote-builder.nix "${self}/features-nixos/optional/boot-efi.nix"
../common/optional/boot-efi.nix
../common/optional/greetd.nix "${self}/features-nixos/optional/greetd.nix"
../common/optional/authentication.nix "${self}/features-nixos/optional/authentication.nix"
../common/optional/pcmanfm.nix "${self}/features-nixos/optional/pcmanfm.nix"
../common/optional/pipewire.nix "${self}/features-nixos/optional/pipewire.nix"
../common/optional/virtualbox.nix "${self}/features-nixos/optional/openssh.nix"
# ../common/optional/gdm.nix "${self}/features-nixos/optional/virtualbox.nix"
# ../common/optional/i3.nix
../common/optional/openssh.nix "${self}/features-nixos/optional/podman.nix"
"${self}/features-nixos/optional/wireshark.nix"
../common/optional/podman.nix "${self}/features-nixos/optional/flatpak.nix"
../common/optional/flatpak.nix
]; ];
networking.hostName = "kardorf"; networking.hostName = "kardorf";