summaryrefslogtreecommitdiff
path: root/machines/xnet/default.nix
diff options
context:
space:
mode:
authorKleidi Bujari <mail@4kb.net>2025-04-02 21:59:20 -0400
committerKleidi Bujari <mail@4kb.net>2025-04-02 21:59:20 -0400
commit09c2b6de63a6ff35348fcb2c2eb57b974f0a8a52 (patch)
treebd8f1d3a51f12cd98764ae572b00f0b32de62644 /machines/xnet/default.nix
parentb1738c105de3bc0ba7cd27f68c9eb146439a0964 (diff)
downloaddepot-09c2b6de63a6ff35348fcb2c2eb57b974f0a8a52.tar.gz
depot-09c2b6de63a6ff35348fcb2c2eb57b974f0a8a52.tar.bz2
depot-09c2b6de63a6ff35348fcb2c2eb57b974f0a8a52.zip
automate project structure
Diffstat (limited to 'machines/xnet/default.nix')
-rw-r--r--machines/xnet/default.nix114
1 files changed, 0 insertions, 114 deletions
diff --git a/machines/xnet/default.nix b/machines/xnet/default.nix
deleted file mode 100644
index 9d224cf..0000000
--- a/machines/xnet/default.nix
+++ /dev/null
@@ -1,114 +0,0 @@
-{ pkgs, lib, config, ... }:
-let
- inherit (builtins)
- fetchurl
- filter
- readFile
- ;
-
- inherit (lib)
- mkDefault
- mkOption
- types
- splitString
- ;
-
- gitKeys = fetchurl {
- url = "https://github.com/kbujari.keys";
- sha256 = "1kskbiyqvjz1wsmcrgh9v0iryf33y70zk503z0m96wmzdjllmc94";
- };
-
-in
-{
- imports = [
- ./disk.nix
- ./nginx.nix
- ./persist.nix
- ./net
- ./desktop
- ./gitserver
- ./monitoring
- ];
-
- options.xnet = {
- pubKeys = mkOption {
- type = types.listOf types.str;
- default = filter (s: s != "")
- (splitString "\n" (readFile gitKeys));
- };
- };
-
- config = {
- i18n.defaultLocale = mkDefault "en_US.UTF-8";
- time.timeZone = mkDefault "America/Toronto";
-
- boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
-
- nix = {
- settings = {
- auto-optimise-store = true;
- experimental-features = [ "nix-command" "flakes" ];
- warn-dirty = false;
-
- # timeout fast from binary cache
- connect-timeout = 5;
- };
- gc = {
- automatic = true;
- options = mkDefault "--delete-older-than 30d";
- };
- };
-
- documentation = {
- doc.enable = mkDefault false;
- info.enable = mkDefault false;
- };
-
- users.mutableUsers = false;
- users.users.root = {
- openssh.authorizedKeys.keys = config.xnet.pubKeys;
- initialPassword = "hello";
- };
-
- security.sudo = {
- execWheelOnly = true;
- extraConfig = "Defaults lecture = never";
- };
-
- nixpkgs.config.allowUnfree = true;
-
- programs.ssh = {
- knownHosts = {
- "github.com".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl";
- "gitlab.com".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfuCHKVTjquxvt6CM6tdG4SLp1Btn/nOeHHE5UOzRdf";
- "git.sr.ht".publicKey = " ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZvRd4EtM7R+IHVMWmDkVU3VLQTSwQDSAvW0t2Tkj60";
- "pascal.ee.ryerson.ca".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFmWInQNT6EoU1NtUYzTs5jtpfbO/m6yvCckOiEGjvDc";
- };
- extraConfig = ''
- Host github
- HostName github.com
- User git
- PreferredAuthentications publickey
-
- Host ee
- HostName pascal.ee.ryerson.ca
- User kbujari
- '';
- };
-
- programs.git = {
- enable = true;
- config = {
- init.defaultBranch = "master";
- fetch.prune = true;
- core.excludesFile = pkgs.writeText "gitignore" ''
- # dev shell caching
- .direnv/
- .envrc
- '';
- push.default = "upstream";
- push.autoSetupRemote = true;
- };
- };
- };
-}