Refactor linux specific configuration
This commit is contained in:
parent
9817f1998f
commit
585dd9f50d
GPG Key ID:
D70DA3DD4D1E9F96
|
|
@ -23,6 +23,179 @@ in
|
||||||
./linux/base.nix
|
./linux/base.nix
|
||||||
];
|
];
|
||||||
|
|
||||||
|
options = with lib; with nLib; {
|
||||||
|
nathan = {
|
||||||
|
# Control enabling of services
|
||||||
|
# Services are system specific so they go here
|
||||||
|
services = {
|
||||||
|
# Use zramSwap, enabled by default
|
||||||
|
zramSwap = mkDefaultOption "zram memory compression" config.nathan.config.isDesktop;
|
||||||
|
# Enable ssh and configure firewall
|
||||||
|
# On by default
|
||||||
|
ssh = mkEnableOptionT "ssh";
|
||||||
|
# Enable tailscale, on by default on linux
|
||||||
|
tailscale = {
|
||||||
|
enable = mkDefaultOption "tailscale" pkgs.stdenv.isLinux;
|
||||||
|
};
|
||||||
|
# Borg backup
|
||||||
|
# Disabled by default as it requires configuration, but a really good idea to turn on
|
||||||
|
borg = {
|
||||||
|
enable = mkEnableOption "borg";
|
||||||
|
extraExcludes = mkOption {
|
||||||
|
default = [ ];
|
||||||
|
description = "List of extra paths to exclude";
|
||||||
|
};
|
||||||
|
extraIncludes = mkOption {
|
||||||
|
default = [ ];
|
||||||
|
description = "List of extra paths to include";
|
||||||
|
};
|
||||||
|
location = mkOption {
|
||||||
|
default = "de1955@de1955.rsync.net:computers";
|
||||||
|
description = "Location to backup to";
|
||||||
|
type = lib.types.str;
|
||||||
|
};
|
||||||
|
passwordFile = mkOption {
|
||||||
|
description = "Path to the password file";
|
||||||
|
type = lib.types.str;
|
||||||
|
};
|
||||||
|
sshKey = mkOption {
|
||||||
|
description = "Path to the ssh key";
|
||||||
|
type = lib.types.str;
|
||||||
|
};
|
||||||
|
startAt = mkOption {
|
||||||
|
description = "How often to run backups";
|
||||||
|
default = "hourly";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
# Nginx
|
||||||
|
nginx = {
|
||||||
|
enable = mkEnableOption "nginx";
|
||||||
|
acme = mkEnableOption "ACME Integration";
|
||||||
|
};
|
||||||
|
# Matrix
|
||||||
|
matrix = {
|
||||||
|
enable = mkEnableOption "matrix";
|
||||||
|
baseDomain = mkOption {
|
||||||
|
description = "Base domain to use for the matrix services";
|
||||||
|
example = "mccarty.io";
|
||||||
|
type = lib.types.str;
|
||||||
|
};
|
||||||
|
element = mkDefaultOption "element" config.nathan.services.matrix.enable;
|
||||||
|
enableRegistration = mkEnableOption "synapse registration";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
# Linux (desktop/server, not android) specific programs
|
||||||
|
programs = {
|
||||||
|
# Install games
|
||||||
|
games = mkEnableOption "games";
|
||||||
|
# Install gpg with yubikey support
|
||||||
|
# Enabled by default if the system is a desktop
|
||||||
|
gpg = mkDefaultOption "gpg" config.nathan.config.isDesktop;
|
||||||
|
utils = {
|
||||||
|
# Enable multi system emulation
|
||||||
|
# Enabled by default on desktop
|
||||||
|
binfmt = mkDefaultOption "binfmt" config.nathan.config.isDesktop;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
# Control enabling of hardware support
|
||||||
|
hardware = {
|
||||||
|
# Logitech hardware support
|
||||||
|
# On by default if the system is a desktop
|
||||||
|
logitech = mkDefaultOption "logitech" config.nathan.config.isDesktop;
|
||||||
|
};
|
||||||
|
# Linux specific configuration
|
||||||
|
config = {
|
||||||
|
# Wether or not to install the main user
|
||||||
|
installUser = mkOption {
|
||||||
|
default = pkgs.stdenv.isLinux;
|
||||||
|
example = true;
|
||||||
|
description = "Whether to install the 'nathan' user";
|
||||||
|
type = lib.types.bool;
|
||||||
|
};
|
||||||
|
# Name of the user to install
|
||||||
|
user = mkOption {
|
||||||
|
default = "nathan";
|
||||||
|
example = "nathan";
|
||||||
|
description = "Username to use for common configuration";
|
||||||
|
type = lib.types.str;
|
||||||
|
};
|
||||||
|
# Name of the user to install
|
||||||
|
email = mkOption {
|
||||||
|
default = "nathan@mccarty.io";
|
||||||
|
example = "nathan@mccarty.io";
|
||||||
|
description = "Email to use for common configuration";
|
||||||
|
type = lib.types.str;
|
||||||
|
};
|
||||||
|
# Is this system a desktop?
|
||||||
|
# Off by default
|
||||||
|
isDesktop = mkEnableOption "Desktop specific settings";
|
||||||
|
# Should we harden this system?
|
||||||
|
# On by default
|
||||||
|
harden = mkEnableOptionT "Apply system hardening";
|
||||||
|
# Enable audio subsystem
|
||||||
|
# On by default if the system is a desktop
|
||||||
|
audio = mkDefaultOption "audio" config.nathan.config.isDesktop;
|
||||||
|
# Basic grub configuration
|
||||||
|
# Off by default
|
||||||
|
setupGrub = mkEnableOption "Setup grub";
|
||||||
|
# Install fonts
|
||||||
|
# On by default if the system is a desktop
|
||||||
|
fonts = mkDefaultOption "fonts" config.nathan.config.isDesktop;
|
||||||
|
# Enable unfree software
|
||||||
|
# On by default
|
||||||
|
enableUnfree = mkEnableOptionT "unfree software";
|
||||||
|
# Nix configuration
|
||||||
|
nix = {
|
||||||
|
# Automatic GC and optimization of the nix store
|
||||||
|
# On by default
|
||||||
|
autoGC = mkEnableOptionT "Nix store optimization and auto gc";
|
||||||
|
# Automatic updating of the system
|
||||||
|
# On by default
|
||||||
|
autoUpdate = mkEnableOptionT "Nix autoupdating";
|
||||||
|
};
|
||||||
|
# Swaywm configuration
|
||||||
|
# On by default if the system is a desktop
|
||||||
|
swaywm = {
|
||||||
|
enable = mkOption {
|
||||||
|
default = config.nathan.config.isDesktop;
|
||||||
|
example = true;
|
||||||
|
description = "Whether to setup swaywm";
|
||||||
|
type = lib.types.bool;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
# Virtualization configuration
|
||||||
|
# All on by default if the system is a desktop
|
||||||
|
virtualization = {
|
||||||
|
qemu = mkDefaultOption "qemu" config.nathan.config.isDesktop;
|
||||||
|
docker = mkDefaultOption "docker" config.nathan.config.isDesktop;
|
||||||
|
lxc = mkDefaultOption "lxc" config.nathan.config.isDesktop;
|
||||||
|
nixos = mkDefaultOption "nixos containers" config.nathan.config.isDesktop;
|
||||||
|
};
|
||||||
|
# Support for interacting with a dual booted windows system
|
||||||
|
windows = {
|
||||||
|
enable = mkEnableOption "Windows Integration";
|
||||||
|
mount = {
|
||||||
|
enable = mkDefaultOption "Mount a bitlockered windows partition" config.nathan.config.windows.enable;
|
||||||
|
device = mkOption {
|
||||||
|
description = "Device to mount";
|
||||||
|
example = "/dev/sda2";
|
||||||
|
type = types.str;
|
||||||
|
};
|
||||||
|
mountPoint = mkOption {
|
||||||
|
description = "Location to mount the device to";
|
||||||
|
example = "/dev/sda2";
|
||||||
|
type = types.str;
|
||||||
|
};
|
||||||
|
keyFile = mkOption {
|
||||||
|
description = "File containing the recovery key for the partition";
|
||||||
|
type = types.str;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
config = {
|
config = {
|
||||||
# Enable the firewall
|
# Enable the firewall
|
||||||
networking.firewall.enable = true;
|
networking.firewall.enable = true;
|
||||||
|
|
|
||||||
|
|
@ -6,179 +6,19 @@ in
|
||||||
{
|
{
|
||||||
options = with lib; with nLib; {
|
options = with lib; with nLib; {
|
||||||
nathan = {
|
nathan = {
|
||||||
# Control enabling of services
|
# Programs, many of these will be generic
|
||||||
services = {
|
|
||||||
# Use zramSwap, enabled by default
|
|
||||||
zramSwap = mkDefaultOption "zram memory compression" config.nathan.config.isDesktop;
|
|
||||||
# Enable ssh and configure firewall
|
|
||||||
# On by default
|
|
||||||
ssh = mkEnableOptionT "ssh";
|
|
||||||
# Enable tailscale, on by default on linux
|
|
||||||
tailscale = {
|
|
||||||
enable = mkDefaultOption "tailscale" pkgs.stdenv.isLinux;
|
|
||||||
};
|
|
||||||
# Borg backup
|
|
||||||
# Disabled by default as it requires configuration, but a really good idea to turn on
|
|
||||||
borg = {
|
|
||||||
enable = mkEnableOption "borg";
|
|
||||||
extraExcludes = mkOption {
|
|
||||||
default = [ ];
|
|
||||||
description = "List of extra paths to exclude";
|
|
||||||
};
|
|
||||||
extraIncludes = mkOption {
|
|
||||||
default = [ ];
|
|
||||||
description = "List of extra paths to include";
|
|
||||||
};
|
|
||||||
location = mkOption {
|
|
||||||
default = "de1955@de1955.rsync.net:computers";
|
|
||||||
description = "Location to backup to";
|
|
||||||
type = lib.types.str;
|
|
||||||
};
|
|
||||||
passwordFile = mkOption {
|
|
||||||
description = "Path to the password file";
|
|
||||||
type = lib.types.str;
|
|
||||||
};
|
|
||||||
sshKey = mkOption {
|
|
||||||
description = "Path to the ssh key";
|
|
||||||
type = lib.types.str;
|
|
||||||
};
|
|
||||||
startAt = mkOption {
|
|
||||||
description = "How often to run backups";
|
|
||||||
default = "hourly";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
# Nginx
|
|
||||||
nginx = {
|
|
||||||
enable = mkEnableOption "nginx";
|
|
||||||
acme = mkEnableOption "ACME Integration";
|
|
||||||
};
|
|
||||||
# Matrix
|
|
||||||
matrix = {
|
|
||||||
enable = mkEnableOption "matrix";
|
|
||||||
baseDomain = mkOption {
|
|
||||||
description = "Base domain to use for the matrix services";
|
|
||||||
example = "mccarty.io";
|
|
||||||
type = lib.types.str;
|
|
||||||
};
|
|
||||||
element = mkDefaultOption "element" config.nathan.services.matrix.enable;
|
|
||||||
enableRegistration = mkEnableOption "synapse registration";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
# Control enabling/configuratin of services
|
|
||||||
programs = {
|
programs = {
|
||||||
# Install games
|
|
||||||
games = mkEnableOption "games";
|
|
||||||
# Install gpg with yubikey support
|
|
||||||
# Enabled by default if the system is a desktop
|
|
||||||
gpg = mkDefaultOption "gpg" config.nathan.config.isDesktop;
|
|
||||||
# Utility modules
|
# Utility modules
|
||||||
utils = {
|
utils = {
|
||||||
# Core utililtes I want on every system
|
# Core utililtes I want on every system
|
||||||
# Enabled by default
|
# Enabled by default
|
||||||
core = mkEnableOptionT "utils-core";
|
core = mkEnableOptionT "utils-core";
|
||||||
# Enable multi system emulation
|
|
||||||
# Enabled by default on desktop
|
|
||||||
binfmt = mkDefaultOption "binfmt" config.nathan.config.isDesktop;
|
|
||||||
# Development utilities that can't be installed through home manager due to collisions
|
# Development utilities that can't be installed through home manager due to collisions
|
||||||
devel = mkDefaultOption "devel" config.nathan.config.isDesktop;
|
devel = mkDefaultOption "devel" config.nathan.config.isDesktop;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
# Control enabling of hardware support
|
|
||||||
hardware = {
|
|
||||||
# Logitech hardware support
|
|
||||||
# On by default if the system is a desktop
|
|
||||||
logitech = mkDefaultOption "logitech" config.nathan.config.isDesktop;
|
|
||||||
};
|
|
||||||
# General system configuration
|
# General system configuration
|
||||||
config = {
|
config = { };
|
||||||
# Wether or not to install the main user
|
|
||||||
installUser = mkOption {
|
|
||||||
default = pkgs.stdenv.isLinux;
|
|
||||||
example = true;
|
|
||||||
description = "Whether to install the 'nathan' user";
|
|
||||||
type = lib.types.bool;
|
|
||||||
};
|
|
||||||
# Name of the user to install
|
|
||||||
user = mkOption {
|
|
||||||
default = "nathan";
|
|
||||||
example = "nathan";
|
|
||||||
description = "Username to use for common configuration";
|
|
||||||
type = lib.types.str;
|
|
||||||
};
|
|
||||||
# Name of the user to install
|
|
||||||
email = mkOption {
|
|
||||||
default = "nathan@mccarty.io";
|
|
||||||
example = "nathan@mccarty.io";
|
|
||||||
description = "Email to use for common configuration";
|
|
||||||
type = lib.types.str;
|
|
||||||
};
|
|
||||||
# Is this system a desktop?
|
|
||||||
# Off by default
|
|
||||||
isDesktop = mkEnableOption "Desktop specific settings";
|
|
||||||
# Should we harden this system?
|
|
||||||
# On by default
|
|
||||||
harden = mkEnableOptionT "Apply system hardening";
|
|
||||||
# Enable audio subsystem
|
|
||||||
# On by default if the system is a desktop
|
|
||||||
audio = mkDefaultOption "audio" config.nathan.config.isDesktop;
|
|
||||||
# Basic grub configuration
|
|
||||||
# Off by default
|
|
||||||
setupGrub = mkEnableOption "Setup grub";
|
|
||||||
# Install fonts
|
|
||||||
# On by default if the system is a desktop
|
|
||||||
fonts = mkDefaultOption "fonts" config.nathan.config.isDesktop;
|
|
||||||
# Enable unfree software
|
|
||||||
# On by default
|
|
||||||
enableUnfree = mkEnableOptionT "unfree software";
|
|
||||||
# Nix configuration
|
|
||||||
nix = {
|
|
||||||
# Automatic GC and optimization of the nix store
|
|
||||||
# On by default
|
|
||||||
autoGC = mkEnableOptionT "Nix store optimization and auto gc";
|
|
||||||
# Automatic updating of the system
|
|
||||||
# On by default
|
|
||||||
autoUpdate = mkEnableOptionT "Nix autoupdating";
|
|
||||||
};
|
|
||||||
# Swaywm configuration
|
|
||||||
# On by default if the system is a desktop
|
|
||||||
swaywm = {
|
|
||||||
enable = mkOption {
|
|
||||||
default = config.nathan.config.isDesktop;
|
|
||||||
example = true;
|
|
||||||
description = "Whether to setup swaywm";
|
|
||||||
type = lib.types.bool;
|
|
||||||
};
|
|
||||||
};
|
|
||||||
# Virtualization configuration
|
|
||||||
# All on by default if the system is a desktop
|
|
||||||
virtualization = {
|
|
||||||
qemu = mkDefaultOption "qemu" config.nathan.config.isDesktop;
|
|
||||||
docker = mkDefaultOption "docker" config.nathan.config.isDesktop;
|
|
||||||
lxc = mkDefaultOption "lxc" config.nathan.config.isDesktop;
|
|
||||||
nixos = mkDefaultOption "nixos containers" config.nathan.config.isDesktop;
|
|
||||||
};
|
|
||||||
# Support for interacting with a dual booted windows system
|
|
||||||
windows = {
|
|
||||||
enable = mkEnableOption "Windows Integration";
|
|
||||||
mount = {
|
|
||||||
enable = mkDefaultOption "Mount a bitlockered windows partition" config.nathan.config.windows.enable;
|
|
||||||
device = mkOption {
|
|
||||||
description = "Device to mount";
|
|
||||||
example = "/dev/sda2";
|
|
||||||
type = types.str;
|
|
||||||
};
|
|
||||||
mountPoint = mkOption {
|
|
||||||
description = "Location to mount the device to";
|
|
||||||
example = "/dev/sda2";
|
|
||||||
type = types.str;
|
|
||||||
};
|
|
||||||
keyFile = mkOption {
|
|
||||||
description = "File containing the recovery key for the partition";
|
|
||||||
type = types.str;
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue