summaryrefslogtreecommitdiff
path: root/hosts/sif/default.nix
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2025-06-07 13:00:03 +0200
committerGregor Kleen <gkleen@yggdrasil.li>2025-06-07 13:00:03 +0200
commitaaf33e220b1412c03b5725abe7cf165c06588fb5 (patch)
tree0ed01a589a2a4ad7fef2bca5877f9c1879e9eeb6 /hosts/sif/default.nix
parent09bc3823ae6cefcc8c22c16a25ff7211377c0410 (diff)
downloadnixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.tar
nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.tar.gz
nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.tar.bz2
nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.tar.xz
nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.zip
...
Diffstat (limited to 'hosts/sif/default.nix')
-rw-r--r--hosts/sif/default.nix23
1 files changed, 7 insertions, 16 deletions
diff --git a/hosts/sif/default.nix b/hosts/sif/default.nix
index b50cad60..6214569a 100644
--- a/hosts/sif/default.nix
+++ b/hosts/sif/default.nix
@@ -12,7 +12,7 @@ let
12in { 12in {
13 imports = with flake.nixosModules.systemProfiles; [ 13 imports = with flake.nixosModules.systemProfiles; [
14 ./hw.nix 14 ./hw.nix
15 ./mail ./libvirt ./greetd 15 ./email ./libvirt ./greetd
16 tmpfs-root bcachefs initrd-all-crypto-modules default-locale openssh rebuild-machines niri-unstable networkmanager 16 tmpfs-root bcachefs initrd-all-crypto-modules default-locale openssh rebuild-machines niri-unstable networkmanager
17 flakeInputs.nixos-hardware.nixosModules.lenovo-thinkpad-p1 17 flakeInputs.nixos-hardware.nixosModules.lenovo-thinkpad-p1
18 flakeInputs.impermanence.nixosModules.impermanence 18 flakeInputs.impermanence.nixosModules.impermanence
@@ -130,6 +130,12 @@ in {
130 useNetworkd = true; 130 useNetworkd = true;
131 }; 131 };
132 132
133 environment.etc."NetworkManager/dnsmasq.d/dnssec.conf" = {
134 text = ''
135 conf-file=${pkgs.dnsmasq}/share/dnsmasq/trust-anchors.conf
136 dnssec
137 '';
138 };
133 environment.etc."NetworkManager/dnsmasq.d/libvirt_dnsmasq.conf" = { 139 environment.etc."NetworkManager/dnsmasq.d/libvirt_dnsmasq.conf" = {
134 text = '' 140 text = ''
135 except-interface=virbr0 141 except-interface=virbr0
@@ -372,19 +378,6 @@ in {
372 ]; 378 ];
373 379
374 services = { 380 services = {
375 uucp = {
376 enable = true;
377 nodeName = "sif";
378 remoteNodes = {
379 "ymir" = {
380 publicKeys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG6KNtsCOl5fsZ4rV7udTulGMphJweLBoKapzerWNoLY root@ymir"];
381 hostnames = ["ymir.yggdrasil.li" "ymir.niflheim.yggdrasil"];
382 };
383 };
384
385 defaultCommands = lib.mkForce [];
386 };
387
388 avahi.enable = true; 381 avahi.enable = true;
389 382
390 fwupd.enable = true; 383 fwupd.enable = true;
@@ -680,8 +673,6 @@ in {
680 "/var/lib/upower" 673 "/var/lib/upower"
681 "/var/lib/postfix" 674 "/var/lib/postfix"
682 "/etc/NetworkManager/system-connections" 675 "/etc/NetworkManager/system-connections"
683 { directory = "/var/uucp"; user = "uucp"; group = "uucp"; mode = "0700"; }
684 { directory = "/var/spool/uucp"; user = "uucp"; group = "uucp"; mode = "0750"; }
685 ]; 676 ];
686 files = [ 677 files = [
687 ]; 678 ];