101 lines
3.2 KiB
Nix
101 lines
3.2 KiB
Nix
{
|
|
inputs = {
|
|
nixpkgs.url = "github:nixos/nixpkgs/nixos-24.11";
|
|
# nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
|
|
|
|
# Use relative to get current version for testing
|
|
# common.url = "path:../../common";
|
|
common.url = "git+https://git.joshuabell.xyz/ringofstorms/dotfiles";
|
|
|
|
ros_neovim.url = "git+https://git.joshuabell.xyz/ringofstorms/nvim";
|
|
};
|
|
|
|
outputs =
|
|
{
|
|
nixpkgs,
|
|
common,
|
|
ros_neovim,
|
|
...
|
|
}:
|
|
let
|
|
configuration_name = "h001";
|
|
lib = nixpkgs.lib;
|
|
in
|
|
{
|
|
nixosConfigurations = {
|
|
"${configuration_name}" = (
|
|
lib.nixosSystem {
|
|
modules = [
|
|
common.nixosModules.default
|
|
ros_neovim.nixosModules.default
|
|
./configuration.nix
|
|
./hardware-configuration.nix
|
|
(
|
|
{ config, pkgs, ... }:
|
|
{
|
|
environment.systemPackages = with pkgs; [
|
|
lua
|
|
];
|
|
|
|
ringofstorms_common = {
|
|
systemName = configuration_name;
|
|
boot.systemd.enable = true;
|
|
secrets.enable = true;
|
|
programs = {
|
|
tailnet.enable = true;
|
|
ssh.enable = true;
|
|
docker.enable = true;
|
|
};
|
|
users = {
|
|
admins = [ "luser" ]; # First admin is also the primary user owning nix config
|
|
users = {
|
|
root = {
|
|
openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILZigrRMF/HHMhjBIwiOnS2pqbOz8Az19tch680BGvmu nix2h001"
|
|
];
|
|
};
|
|
luser = {
|
|
openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILZigrRMF/HHMhjBIwiOnS2pqbOz8Az19tch680BGvmu nix2h001"
|
|
];
|
|
extraGroups = [
|
|
"networkmanager"
|
|
"video"
|
|
"input"
|
|
];
|
|
shell = pkgs.zsh;
|
|
packages = with pkgs; [
|
|
bitwarden
|
|
vaultwarden
|
|
];
|
|
};
|
|
};
|
|
};
|
|
homeManager = {
|
|
users = {
|
|
luser = {
|
|
imports = with common.homeManagerModules; [
|
|
kitty
|
|
tmux
|
|
atuin
|
|
direnv
|
|
git
|
|
nix_deprecations
|
|
postgres
|
|
ssh
|
|
starship
|
|
zoxide
|
|
zsh
|
|
];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|
|
)
|
|
];
|
|
}
|
|
);
|
|
};
|
|
};
|
|
}
|