Add icdm-root

hosts/icdm-root/boot.nix

@@ -0,0 +1,11 @@
+{ pkgs, config, ...}:
+
+{
+	# Bootloader.
+	boot = {
+		loader.grub = {
+			enable = true;
+			device = "/dev/sda";
+		};
+	};
+}

hosts/icdm-root/default.nix

@@ -0,0 +1,24 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ config, pkgs, agenix, ... }:
+
+{
+	imports = [ # Include the results of the hardware scan.
+		./hardware-configuration.nix
+		./boot.nix
+		./filesystem.nix
+		./location.nix
+		./networking.nix
+		./wiki.nix
+	];
+
+	# Define a user account. Don't forget to set a password with ‘passwd’.
+	users.users.greg = {
+		isNormalUser = true;
+		description = "Gregory Hellings";
+		extraGroups = [ "networkmanager" "wheel" ];
+		packages = with pkgs; [];
+	};
+}

hosts/icdm-root/filesystem.nix

@@ -0,0 +1,12 @@
+{ ... }:
+
+let
+in {
+	fileSystems."serve" = {
+		#device = "10.42.1.4:/volume1/icdm-mysql/";
+		#fsType = "nfs";
+		device = "/dev/sdb1";
+		fsType = "auto";
+		mountPoint = "/srv";
+	};
+}

hosts/icdm-root/hardware-configuration.nix

@@ -0,0 +1,45 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ehci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/dab0d455-e25e-4445-8fa4-5320047d7e7b";
+      fsType = "btrfs";
+      options = [ "subvol=@" ];
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/5aedbb07-5761-423b-909d-2560405eae32";
+      fsType = "ext4";
+    };
+
+  fileSystems."/var" =
+    { device = "/dev/disk/by-uuid/57968536-c29d-417d-997e-85223d1d1f65";
+      fsType = "btrfs";
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/09691dce-375a-43c6-8d40-4498d20a6d9a"; }
+    ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.eno1.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp2s0.useDHCP = lib.mkDefault true;
+
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/icdm-root/location.nix

@@ -0,0 +1,15 @@
+{...}:
+
+{
+  # Set your time zone.
+  time.timeZone = "America/Chicago";
+
+  # Select internationalisation properties.
+  i18n.defaultLocale = "en_US.UTF-8";
+
+  # Configure keymap in X11
+  services.xserver = {
+    layout = "us";
+    xkbVariant = "";
+  };
+}

hosts/icdm-root/networking.nix

@@ -0,0 +1,20 @@
+{...}:
+
+{
+	# If we have to do proxying in Bayonnais, we can start to work on that here
+	# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+	networking = {
+		hostName = "icdm-root";
+		useDHCP = false;
+		defaultGateway = "10.42.1.1";
+		nameservers = [ "100.100.100.100" "10.42.1.2" ];
+		enableIPv6 = false;
+
+		interfaces = {
+			eno1.ipv4.addresses = [ {
+				address = "10.42.101.1";
+				prefixLength = 16;
+			} ];
+		};
+	};
+}

hosts/icdm-root/wiki.nix

@@ -0,0 +1,32 @@
+{ pkgs, ... }:
+let
+	wikiPasswordFile = "/var/mediawiki/passwordFile";
+	wikiHost = "wiki.icdm.lan";
+	kiwixport = 8080;
+	dependents = with pkgs; [
+		enwiki-dump
+		transmission
+	];
+in
+{
+	services.kiwix-serve = {
+		enable = true;
+		port = kiwixport;
+		path = "/srv/zims/*.zim";
+	};
+
+	services.transmission = {
+		enable = true;
+		settings = {
+			download-dir = "/srv";
+			incomplete-dir = "/srv/incomplete";
+			rpc-bind-address = "0.0.0.0";
+			rpc-whitelist = "10.42.*,127.*,localhost";
+		};
+	};
+
+	greg.proxies."${wikiHost}".target = "http://localhost:${toString kiwixport}";
+	networking.firewall.allowedTCPPorts = [ 80 ];
+
+	environment.systemPackages = dependents;
+}