System/machines/levitation/configuration.nix

104 lines
2.2 KiB
Nix
Raw Normal View History

2022-08-01 18:10:41 -04:00
{ config, lib, pkgs, inputs, ... }:
2022-07-03 00:43:50 -04:00
{
# Sops setup for this machine
sops.secrets = {
"borg-ssh-key" = {
sopsFile = ../../secrets/levitation/borg.yaml;
format = "yaml";
};
"borg-password" = {
sopsFile = ../../secrets/levitation/borg.yaml;
format = "yaml";
};
"windows-bitlocker-key" = {
sopsFile = ../../secrets/levitation/windows.yaml;
format = "yaml";
};
2022-07-03 00:43:50 -04:00
};
# Setup system configuration
nathan = {
programs = {
games = true;
};
services = {
borg = {
enable = true;
extraExcludes = [
"/home/${config.nathan.config.user}/Music"
"/var/lib/docker"
"/var/log"
];
passwordFile = config.sops.secrets."borg-password".path;
sshKey = config.sops.secrets."borg-ssh-key".path;
};
};
2022-10-09 21:43:38 -04:00
hardware = {
amdPassthrough = true;
};
2022-07-03 00:43:50 -04:00
config = {
isDesktop = true;
setupGrub = true;
nix.autoUpdate = false;
2022-07-18 16:37:10 -04:00
harden = false;
windows = {
enable = true;
mount = {
device = "/dev/nvme0n1p3";
mountPoint = "/mnt/windows";
keyFile = config.sops.secrets."windows-bitlocker-key".path;
};
};
2022-07-03 00:43:50 -04:00
};
};
# Configure networking
networking = {
domain = "mccarty.io";
useDHCP = false;
interfaces.enp6s0.useDHCP = true;
nat.externalInterface = "enp6s0";
# Open ports for soulseek
firewall = {
allowedTCPPorts = [ 61377 ];
allowedUDPPorts = [ 61377 ];
};
};
# Setup home manager
home-manager.users.nathan = import ./home.nix;
2022-07-24 13:52:34 -04:00
# TPM setup
security = {
tpm2 = {
enable = true;
};
};
boot = {
initrd = {
kernelModules = [ "tpm_crb" ];
systemd = {
enable = true;
};
};
kernelParams = [ "crypt-pv.luks.options=tpm2-device=auto" ];
};
2022-08-01 18:10:41 -04:00
# Install gamescope
environment.systemPackages = [
inputs.gamescope.defaultPackage."x86_64-linux"
];
nixpkgs.config.packageOverrides = pkgs: {
steam = pkgs.steam.override {
extraPkgs = pkgs: [
inputs.gamescope.defaultPackage."x86_64-linux"
];
};
};
2022-09-20 13:12:24 -04:00
# Configure nix build
nix.settings = {
2022-09-26 00:05:25 -04:00
cores = 8;
max-jobs = 4;
2022-09-20 13:12:24 -04:00
};
2022-07-03 00:43:50 -04:00
}