diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2025-06-07 13:00:03 +0200 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2025-06-07 13:00:03 +0200 |
commit | aaf33e220b1412c03b5725abe7cf165c06588fb5 (patch) | |
tree | 0ed01a589a2a4ad7fef2bca5877f9c1879e9eeb6 /hosts/sif/default.nix | |
parent | 09bc3823ae6cefcc8c22c16a25ff7211377c0410 (diff) | |
download | nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.tar nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.tar.gz nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.tar.bz2 nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.tar.xz nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.zip |
...
Diffstat (limited to 'hosts/sif/default.nix')
-rw-r--r-- | hosts/sif/default.nix | 23 |
1 files changed, 7 insertions, 16 deletions
diff --git a/hosts/sif/default.nix b/hosts/sif/default.nix index b50cad60..6214569a 100644 --- a/hosts/sif/default.nix +++ b/hosts/sif/default.nix | |||
@@ -12,7 +12,7 @@ let | |||
12 | in { | 12 | in { |
13 | imports = with flake.nixosModules.systemProfiles; [ | 13 | imports = with flake.nixosModules.systemProfiles; [ |
14 | ./hw.nix | 14 | ./hw.nix |
15 | ./mail ./libvirt ./greetd | 15 | ./email ./libvirt ./greetd |
16 | tmpfs-root bcachefs initrd-all-crypto-modules default-locale openssh rebuild-machines niri-unstable networkmanager | 16 | tmpfs-root bcachefs initrd-all-crypto-modules default-locale openssh rebuild-machines niri-unstable networkmanager |
17 | flakeInputs.nixos-hardware.nixosModules.lenovo-thinkpad-p1 | 17 | flakeInputs.nixos-hardware.nixosModules.lenovo-thinkpad-p1 |
18 | flakeInputs.impermanence.nixosModules.impermanence | 18 | flakeInputs.impermanence.nixosModules.impermanence |
@@ -130,6 +130,12 @@ in { | |||
130 | useNetworkd = true; | 130 | useNetworkd = true; |
131 | }; | 131 | }; |
132 | 132 | ||
133 | environment.etc."NetworkManager/dnsmasq.d/dnssec.conf" = { | ||
134 | text = '' | ||
135 | conf-file=${pkgs.dnsmasq}/share/dnsmasq/trust-anchors.conf | ||
136 | dnssec | ||
137 | ''; | ||
138 | }; | ||
133 | environment.etc."NetworkManager/dnsmasq.d/libvirt_dnsmasq.conf" = { | 139 | environment.etc."NetworkManager/dnsmasq.d/libvirt_dnsmasq.conf" = { |
134 | text = '' | 140 | text = '' |
135 | except-interface=virbr0 | 141 | except-interface=virbr0 |
@@ -372,19 +378,6 @@ in { | |||
372 | ]; | 378 | ]; |
373 | 379 | ||
374 | services = { | 380 | services = { |
375 | uucp = { | ||
376 | enable = true; | ||
377 | nodeName = "sif"; | ||
378 | remoteNodes = { | ||
379 | "ymir" = { | ||
380 | publicKeys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG6KNtsCOl5fsZ4rV7udTulGMphJweLBoKapzerWNoLY root@ymir"]; | ||
381 | hostnames = ["ymir.yggdrasil.li" "ymir.niflheim.yggdrasil"]; | ||
382 | }; | ||
383 | }; | ||
384 | |||
385 | defaultCommands = lib.mkForce []; | ||
386 | }; | ||
387 | |||
388 | avahi.enable = true; | 381 | avahi.enable = true; |
389 | 382 | ||
390 | fwupd.enable = true; | 383 | fwupd.enable = true; |
@@ -680,8 +673,6 @@ in { | |||
680 | "/var/lib/upower" | 673 | "/var/lib/upower" |
681 | "/var/lib/postfix" | 674 | "/var/lib/postfix" |
682 | "/etc/NetworkManager/system-connections" | 675 | "/etc/NetworkManager/system-connections" |
683 | { directory = "/var/uucp"; user = "uucp"; group = "uucp"; mode = "0700"; } | ||
684 | { directory = "/var/spool/uucp"; user = "uucp"; group = "uucp"; mode = "0750"; } | ||
685 | ]; | 676 | ]; |
686 | files = [ | 677 | files = [ |
687 | ]; | 678 | ]; |