root
84e4c68f0e
buildbot/nix-eval Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-genesis Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-exodus Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-hosea Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-isaiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-jeremiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-linode Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-zeke Build done.
buildbot/nix-build Build done.
Per review feedback:
- nebula module now defaults unsafeRoutes to [{route=10.42.0.0/16 via=10.157.0.2}]
so all regular nodes get home LAN routing automatically
- genesis overrides unsafeRoutes=[] since it IS the routing node (avoids loop)
- exodus and all k3s nodes (hosea, isaiah, jeremiah, zeke) simplified to
nebula.enable = true only, relying on the new default
94 lines
1.5 KiB
Nix
94 lines
1.5 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
top,
|
|
...
|
|
}:
|
|
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
top.nix-hardware.nixosModules.framework-11th-gen-intel
|
|
];
|
|
|
|
age.secrets = {
|
|
compose-attic.file = ../../../secrets/compose/attic.env.age;
|
|
};
|
|
|
|
boot = {
|
|
loader = {
|
|
systemd-boot.enable = true;
|
|
efi.canTouchEfiVariables = true;
|
|
};
|
|
binfmt.emulatedSystems = [
|
|
"i686-linux"
|
|
"aarch64-linux"
|
|
];
|
|
};
|
|
|
|
greg = {
|
|
home = true;
|
|
gnome.enable = true;
|
|
nebula = {
|
|
enable = true;
|
|
};
|
|
podman.enable = true;
|
|
print.enable = true;
|
|
tailscale = {
|
|
enable = true;
|
|
tags = [ "mobile" ];
|
|
};
|
|
runner = {
|
|
enable = true;
|
|
qemu = true;
|
|
};
|
|
};
|
|
|
|
hardware = {
|
|
graphics = {
|
|
enable = true;
|
|
extraPackages = with pkgs; [
|
|
intel-media-driver
|
|
intel-vaapi-driver
|
|
vpl-gpu-rt
|
|
];
|
|
};
|
|
};
|
|
|
|
nix.settings = {
|
|
extra-platforms = config.boot.binfmt.emulatedSystems;
|
|
system-features = [ "gccarch-x86-64-v3" ];
|
|
};
|
|
|
|
networking = {
|
|
hostName = "exodus";
|
|
networkmanager.enable = lib.mkForce true;
|
|
};
|
|
|
|
programs = {
|
|
steam = {
|
|
enable = true;
|
|
protontricks.enable = true;
|
|
};
|
|
};
|
|
|
|
services = {
|
|
fprintd.enable = true;
|
|
fwupd = {
|
|
enable = true;
|
|
extraRemotes = [ "lvfs-testing" ];
|
|
};
|
|
};
|
|
|
|
virtualisation = {
|
|
oci-containers.backend = "podman";
|
|
};
|
|
|
|
users.users.greg.extraGroups = [
|
|
"adbusers"
|
|
"kvm"
|
|
"podman"
|
|
];
|
|
}
|