79 lines
1.8 KiB
Nix
79 lines
1.8 KiB
Nix
{ config, lib, pkgs, inputs, ... }:
|
|
|
|
{
|
|
# Sops setup for this machine
|
|
sops.secrets = {
|
|
# "borg-ssh-key" = {
|
|
# sopsFile = ../../secrets/productivity-vm/borg.yaml;
|
|
# format = "yaml";
|
|
# };
|
|
# "borg-password" = {
|
|
# sopsFile = ../../secrets/productivity-vm/borg.yaml;
|
|
# format = "yaml";
|
|
# };
|
|
# "windows-bitlocker-key" = {
|
|
# sopsFile = ../../secrets/productivity-vm/windows.yaml;
|
|
# format = "yaml";
|
|
# };
|
|
# "last.fm" = {
|
|
# sopsFile = ../../secrets/productivity-vm/last.fm;
|
|
# format = "binary";
|
|
# owner = "nathan";
|
|
# mode = "0400";
|
|
# };
|
|
};
|
|
# Make the vm boot
|
|
boot.loader.grub = {
|
|
enable = true;
|
|
device = "/dev/sda";
|
|
useOSProber = true;
|
|
};
|
|
virtualisation.vmware.guest.enable = true;
|
|
# Setup system configuration
|
|
nathan = {
|
|
programs = { games = false; };
|
|
services = {
|
|
borg = {
|
|
# TODO: Enable
|
|
enable = false;
|
|
extraExcludes = [
|
|
"/home/${config.nathan.config.user}/Music"
|
|
"/var/lib/docker"
|
|
"/var/log"
|
|
];
|
|
passwordFile = config.sops.secrets."borg-password".path;
|
|
sshKey = config.sops.secrets."borg-ssh-key".path;
|
|
};
|
|
kubo = { enable = false; };
|
|
};
|
|
config = {
|
|
isDesktop = true;
|
|
setupGrub = false;
|
|
nix.autoUpdate = false;
|
|
harden = false;
|
|
};
|
|
};
|
|
# Configure networking
|
|
networking = {
|
|
domain = "mccarty.io";
|
|
useDHCP = false;
|
|
interfaces.ens33.useDHCP = true;
|
|
nat.externalInterface = "ens33";
|
|
# Open ports for soulseek
|
|
firewall = {
|
|
allowedTCPPorts = [ 61377 ];
|
|
allowedUDPPorts = [ 61377 ];
|
|
};
|
|
};
|
|
|
|
# Setup home manager
|
|
home-manager.users.nathan = import ./home.nix;
|
|
|
|
# Configure nix build
|
|
nix.settings = {
|
|
cores = 8;
|
|
max-jobs = 4;
|
|
};
|
|
|
|
}
|