-
Notifications
You must be signed in to change notification settings - Fork 4
/
nixos.nix
146 lines (131 loc) · 3.99 KB
/
nixos.nix
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
{ inputs
, defaultNixConf
, ...
}:
let
domain = "foodogsquared.one";
subdomain = name: "${name}.${domain}";
in
{
setups.nixos = {
configs = {
# The main desktop.
ni = {
nixpkgs.branch = "nixos-unstable";
systems = [ "x86_64-linux" ];
formats = null;
modules = [
inputs.disko.nixosModules.disko
inputs.sops-nix.nixosModules.sops
inputs.self.nixosModules.wrapper-manager
{
documentation.nixos.extraModules = [
../../modules/nixos
../../modules/nixos/_private
];
wrapper-manager.documentation.manpage.enable = true;
wrapper-manager.documentation.extraModules = [
../../modules/wrapper-manager
../../modules/wrapper-manager/_private
];
}
];
home-manager = {
branch = "home-manager-unstable";
nixpkgsInstance = "global";
users.foo-dogsquared = {
userConfig = {
uid = 1000;
extraGroups = [
"adm"
"adbusers"
"wheel"
"audio"
"docker"
"podman"
"networkmanager"
"systemd-journal"
"wireshark"
];
hashedPassword =
"$6$.cMYto0K0CHbpIMT$dRqyKs4q1ppzmTpdzy5FWP/V832a6X..FwM8CJ30ivK0nfLjQ7DubctxOZbeOtygfjcUd1PZ0nQoQpOg/WMvg.";
description = "Gabriel Arazas";
};
};
};
};
# A remote server.
plover = {
nixpkgs.branch = "nixos-unstable";
home-manager.branch = "home-manager-unstable";
systems = [ "x86_64-linux" ];
inherit domain;
formats = null;
deploy = {
hostname = subdomain "plover";
autoRollback = true;
magicRollback = true;
};
modules = [
inputs.disko.nixosModules.disko
inputs.sops-nix.nixosModules.sops
];
};
# TODO: Remove extra newlines that are here for whatever reason.
#{{{
void = {
nixpkgs.branch = "nixos-unstable";
home-manager.branch = "home-manager-unstable";
systems = [ "x86_64-linux" ];
formats = [ "vm" ];
};
#}}}
# The barely customized non-graphical installer.
bootstrap = {
nixpkgs.branch = "nixos-unstable-small";
systems = [ "aarch64-linux" "x86_64-linux" ];
formats = [ "install-iso" ];
};
# The barely customized graphical installer.
graphical-installer = {
nixpkgs.branch = "nixos-unstable";
home-manager.branch = "home-manager-unstable";
systems = [ "aarch64-linux" "x86_64-linux" ];
formats = [ "install-iso-graphical" ];
diskoConfigs = [ "external-hdd" ];
shouldBePartOfNixOSConfigurations = true;
};
# The WSL system (that is yet to be used).
winnowing = {
nixpkgs = {
branch = "nixos-unstable";
overlays = [
inputs.neovim-nightly-overlay.overlays.default
];
};
home-manager.branch = "home-manager-unstable";
systems = [ "x86_64-linux" ];
formats = null;
modules = [
# Well, well, well...
inputs.nixos-wsl.nixosModules.default
];
};
};
# Basically the baseline NixOS configuration of the whole cluster.
sharedModules = [
# Only have third-party modules with optional NixOS modules.
inputs.nix-index-database.nixosModules.nix-index
# The rainbow road to ricing your raw materials.
inputs.self.nixosModules.bahaghari
# Bring our own teeny-tiny snippets of configurations.
defaultNixConf
../../modules/nixos/profiles/generic.nix
../../modules/nixos/profiles/nix-conf.nix
];
};
flake = {
# Listing my public NixOS modules if anyone cares.
nixosModules.default = ../../modules/nixos;
};
}