fujitsu: init

flake.lock

@@ -332,11 +332,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1715447595,
-        "narHash": "sha256-VsVAUQOj/cS1LCOmMjAGeRksXIAdPnFIjCQ0XLkCsT0=",
+        "lastModified": 1715534503,
+        "narHash": "sha256-5ZSVkFadZbFP1THataCaSf0JH2cAH3S29hU9rrxTEqk=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "062ca2a9370a27a35c524dc82d540e6e9824b652",
+        "rev": "2057814051972fa1453ddfb0d98badbea9b83c06",
         "type": "github"
       },
       "original": {

flake.nix

@@ -119,6 +119,20 @@
             }
           ];
         };
+        fujitsu = nixpkgs.lib.nixosSystem {
+          system = "x86_64-linux";
+          specialArgs = attrs;
+          modules = [
+            nix-index-database.nixosModules.nix-index
+            impermanence.nixosModules.impermanence
+            agenix.nixosModules.default
+            ./hosts/fujitsu
+            ./shared
+            {
+              nixpkgs.overlays = [ self.overlays.default ];
+            }
+          ];
+        };
         falkenstein = nixpkgs.lib.nixosSystem {
           system = "x86_64-linux";
           specialArgs = attrs;

hosts/fujitsu/default.nix

@@ -0,0 +1,56 @@
+# Edit this configuration file to define what should be installed on
+# your system. Help is available in the configuration.nix(5) man page, on
+# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
+
+{ config, lib, pkgs, ... }:
+
+{
+  imports = [
+    ./hardware-configuration.nix
+  ];
+
+  boot.loader.grub.enable = true;
+  boot.loader.grub.devices = [ "/dev/sda" "/dev/sdb" ];
+  services.btrfs.autoScrub.enable = true;
+
+  # TODO move to netwurking
+  networking.hostName = "fujitsu"; # Define your hostname.
+
+  time.timeZone = "Europe/Berlin";
+  console = {
+    font = "Lat2-Terminus16";
+    keyMap = "dvorak";
+  };
+
+  environment.systemPackages = with pkgs; [
+    vim
+    htop-vim
+    helix
+    lsof
+    btdu
+    tcpdump
+    mtr
+  ];
+  programs.git = {
+    enable = true;
+    config = {
+      user.name = "Rouven Seifert";
+      user.email = "rouven@rfive.de";
+    };
+  };
+
+  services.openssh.enable = true;
+  services.journald.gateway.enable = true;
+  programs.mosh.enable = true;
+
+  users.users.root.initialHashedPassword = "$y$j9T$hYM7FT2hn3O7OWBn9uz8e0$XquxONcPSke6YjdRGwOzGxC0/92hgP7PIB0y0K.Qdr/";
+  users.users.root.openssh.authorizedKeys.keyFiles = [
+    ../../keys/ssh/rouven-thinkpad
+    ../../keys/ssh/root-thinkpad
+    ../../keys/ssh/rouven-pixel
+    ../../keys/ssh/root-falkenstein
+  ];
+
+  system.stateVersion = "24.05"; # Did you read the comment?
+}
+

hosts/fujitsu/hardware-configuration.nix

@@ -0,0 +1,47 @@
+{ config, lib, modulesPath, ... }:
+
+{
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+  ];
+
+  boot.initrd.availableKernelModules = [ "ehci_pci" "ata_piix" "usb_storage" "usbhid" "sd_mod" "sr_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" = {
+    device = "/dev/sda2";
+    fsType = "btrfs";
+    options = [ "subvol=root" ];
+  };
+
+  fileSystems."/nix" = {
+    device = "/dev/sda2";
+    fsType = "btrfs";
+    options = [ "subvol=nix" "compress=zstd" "noatime" ];
+  };
+
+  fileSystems."/var/lib" = {
+    device = "/dev/sda2";
+    fsType = "btrfs";
+    options = [ "subvol=lib" "compress=zstd" "noatime" ];
+  };
+
+  fileSystems."/var/log" = {
+    device = "/dev/sda2";
+    fsType = "btrfs";
+    options = [ "subvol=log" "compress=zstd" "noatime" ];
+  };
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp0s25.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp2s0.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/iso/default.nix

@@ -11,6 +11,7 @@
   programs.git.enable = true;
   environment.systemPackages = with pkgs; [
     helix
+    vim
   ];
 
   # in case we need to rescue a zfs machine

hosts/nuc/hardware-configuration.nix

@@ -16,42 +16,36 @@
   boot.extraModulePackages = [ ];
   services.fstrim.enable = true;
 
-  fileSystems."/" =
-    {
-      device = "tmpfs";
-      fsType = "tmpfs";
-      options = [ "mode=755" ];
-    };
+  fileSystems."/" = {
+    device = "tmpfs";
+    fsType = "tmpfs";
+    options = [ "mode=755" ];
+  };
 
-  fileSystems."/var/lib" =
-    {
-      device = "/dev/disk/by-uuid/16b0bd14-1b07-477d-a20d-982f9467f6df";
-      fsType = "btrfs";
-      options = [ "subvol=lib" "compress=zstd" "discard=async" "noatime" ];
-    };
+  fileSystems."/var/lib" = {
+    device = "/dev/disk/by-uuid/16b0bd14-1b07-477d-a20d-982f9467f6df";
+    fsType = "btrfs";
+    options = [ "subvol=lib" "compress=zstd" "discard=async" "noatime" ];
+  };
 
-  fileSystems."/var/log" =
-    {
-      device = "/dev/disk/by-uuid/16b0bd14-1b07-477d-a20d-982f9467f6df";
-      fsType = "btrfs";
-      options = [ "subvol=log" "compress=zstd" "discard=async" "noatime" ];
-    };
+  fileSystems."/var/log" = {
+    device = "/dev/disk/by-uuid/16b0bd14-1b07-477d-a20d-982f9467f6df";
+    fsType = "btrfs";
+    options = [ "subvol=log" "compress=zstd" "discard=async" "noatime" ];
+  };
 
-  fileSystems."/nix" =
-    {
-      device = "/dev/disk/by-uuid/16b0bd14-1b07-477d-a20d-982f9467f6df";
-      fsType = "btrfs";
-      options = [ "subvol=nix" "compress=zstd" "discard=async" "noatime" ];
-    };
+  fileSystems."/nix" = {
+    device = "/dev/disk/by-uuid/16b0bd14-1b07-477d-a20d-982f9467f6df";
+    fsType = "btrfs";
+    options = [ "subvol=nix" "compress=zstd" "discard=async" "noatime" ];
+  };
 
-  fileSystems."/boot" =
-    {
-      device = "/dev/disk/by-uuid/0135-7C8C";
-      fsType = "vfat";
-    };
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/0135-7C8C";
+    fsType = "vfat";
+  };
 
-  swapDevices =
-    [{ device = "/dev/disk/by-uuid/fdedb47c-a370-4005-ac37-1c186e667de0"; }];
+  swapDevices = [{ device = "/dev/disk/by-uuid/fdedb47c-a370-4005-ac37-1c186e667de0"; }];
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
   hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;

hosts/vm/hardware-configuration.nix

@@ -11,13 +11,12 @@
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
-  fileSystems."/" =
-    {
-
-      # Replace with actual config
-      device = "/dev/sda";
-      fsType = "ext4";
-    };
+  # fileSystems."/" =
+  #   {
+  #     # Replace with actual config
+  #     device = "/dev/sda";
+  #     fsType = "ext4";
+  #   };
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
 }

shared/systemd.nix

@@ -3,7 +3,8 @@
 {
   systemd = {
 
-    package = lib.mkDefault (nixpkgs-systemd-256.legacyPackages.x86_64-linux.systemd.override { withHomed = false; });
+    # package = lib.mkDefault (nixpkgs-systemd-256.legacyPackages.x86_64-linux.systemd.override { withHomed = false; });
+    package = lib.mkDefault (pkgs.systemd.override { withHomed = false; });
     sleep.extraConfig = ''
       HibernateDelaySec=2h
     '';

users/rouven/modules/packages.nix

@@ -24,6 +24,7 @@
 
     # internet
     google-chrome
+    liferea
 
     # messaging
     tdesktop
@@ -35,7 +36,7 @@
 
     # cryptography
     yubikey-manager
-    # python311Packages.pyhanko # broken, TODO fix
+    python311Packages.pyhanko # broken, TODO fix
     bitwarden-cli
 
     # misc