nixos-configs/machines/gamepc/configuration.nix
Pim Kunis 0812586942 Create helper option for deploying sops keys
Update public key of sue-root because I lost the private key
2024-11-21 22:27:29 +01:00

111 lines
2.2 KiB
Nix

{
config,
lib,
...
}: {
config = {
pim = {
cinnamon.enable = true;
sopsKeys = {
root = ./nixos.sops.yaml;
pim = ./pim.sops.yaml;
};
};
facter.reportPath = ./facter.json;
networking.hostName = "gamepc";
home-manager.users.pim.imports = [./pim.home.nix];
programs.steam.enable = true;
users.users = {
root.openssh.authorizedKeys.keys = config.pim.ssh.keys.pim;
pim = {
isNormalUser = true;
openssh.authorizedKeys.keys = config.pim.ssh.keys.pim;
};
};
deployment = {
targetHost = "gamepc";
targetUser = "root";
tags = ["desktop"];
};
services = {
openssh.enable = true;
tailscale.enable = true;
};
boot.loader.grub = {
enable = true;
efiSupport = true;
efiInstallAsRemovable = true;
};
disko.devices.disk = lib.genAttrs ["0" "1"] (name: {
type = "disk";
device = "/dev/nvme${name}n1";
content = {
type = "gpt";
partitions = {
boot = {
size = "1M";
type = "EF02"; # for grub MBR
};
ESP = {
size = "500M";
type = "EF00";
content = {
type = "mdraid";
name = "boot";
};
};
mdadm = {
size = "100%";
content = {
type = "mdraid";
name = "raid0";
};
};
};
};
});
disko.devices.mdadm = {
boot = {
type = "mdadm";
level = 1;
metadata = "1.0";
content = {
type = "filesystem";
format = "vfat";
mountpoint = "/boot";
};
};
raid0 = {
type = "mdadm";
level = 0;
content = {
type = "gpt";
partitions = {
primary = {
end = "-4G";
content = {
type = "filesystem";
format = "ext4";
mountpoint = "/";
};
};
swap = {
size = "100%";
content = {
type = "swap";
};
};
};
};
};
};
};
}