diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2025-06-07 13:00:03 +0200 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2025-06-07 13:00:03 +0200 |
| commit | aaf33e220b1412c03b5725abe7cf165c06588fb5 (patch) | |
| tree | 0ed01a589a2a4ad7fef2bca5877f9c1879e9eeb6 /hosts/sif/default.nix | |
| parent | 09bc3823ae6cefcc8c22c16a25ff7211377c0410 (diff) | |
| download | nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.tar nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.tar.gz nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.tar.bz2 nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.tar.xz nixos-aaf33e220b1412c03b5725abe7cf165c06588fb5.zip | |
...
Diffstat (limited to 'hosts/sif/default.nix')
| -rw-r--r-- | hosts/sif/default.nix | 23 |
1 files changed, 7 insertions, 16 deletions
diff --git a/hosts/sif/default.nix b/hosts/sif/default.nix index b50cad60..6214569a 100644 --- a/hosts/sif/default.nix +++ b/hosts/sif/default.nix | |||
| @@ -12,7 +12,7 @@ let | |||
| 12 | in { | 12 | in { |
| 13 | imports = with flake.nixosModules.systemProfiles; [ | 13 | imports = with flake.nixosModules.systemProfiles; [ |
| 14 | ./hw.nix | 14 | ./hw.nix |
| 15 | ./mail ./libvirt ./greetd | 15 | ./email ./libvirt ./greetd |
| 16 | tmpfs-root bcachefs initrd-all-crypto-modules default-locale openssh rebuild-machines niri-unstable networkmanager | 16 | tmpfs-root bcachefs initrd-all-crypto-modules default-locale openssh rebuild-machines niri-unstable networkmanager |
| 17 | flakeInputs.nixos-hardware.nixosModules.lenovo-thinkpad-p1 | 17 | flakeInputs.nixos-hardware.nixosModules.lenovo-thinkpad-p1 |
| 18 | flakeInputs.impermanence.nixosModules.impermanence | 18 | flakeInputs.impermanence.nixosModules.impermanence |
| @@ -130,6 +130,12 @@ in { | |||
| 130 | useNetworkd = true; | 130 | useNetworkd = true; |
| 131 | }; | 131 | }; |
| 132 | 132 | ||
| 133 | environment.etc."NetworkManager/dnsmasq.d/dnssec.conf" = { | ||
| 134 | text = '' | ||
| 135 | conf-file=${pkgs.dnsmasq}/share/dnsmasq/trust-anchors.conf | ||
| 136 | dnssec | ||
| 137 | ''; | ||
| 138 | }; | ||
| 133 | environment.etc."NetworkManager/dnsmasq.d/libvirt_dnsmasq.conf" = { | 139 | environment.etc."NetworkManager/dnsmasq.d/libvirt_dnsmasq.conf" = { |
| 134 | text = '' | 140 | text = '' |
| 135 | except-interface=virbr0 | 141 | except-interface=virbr0 |
| @@ -372,19 +378,6 @@ in { | |||
| 372 | ]; | 378 | ]; |
| 373 | 379 | ||
| 374 | services = { | 380 | services = { |
| 375 | uucp = { | ||
| 376 | enable = true; | ||
| 377 | nodeName = "sif"; | ||
| 378 | remoteNodes = { | ||
| 379 | "ymir" = { | ||
| 380 | publicKeys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG6KNtsCOl5fsZ4rV7udTulGMphJweLBoKapzerWNoLY root@ymir"]; | ||
| 381 | hostnames = ["ymir.yggdrasil.li" "ymir.niflheim.yggdrasil"]; | ||
| 382 | }; | ||
| 383 | }; | ||
| 384 | |||
| 385 | defaultCommands = lib.mkForce []; | ||
| 386 | }; | ||
| 387 | |||
| 388 | avahi.enable = true; | 381 | avahi.enable = true; |
| 389 | 382 | ||
| 390 | fwupd.enable = true; | 383 | fwupd.enable = true; |
| @@ -680,8 +673,6 @@ in { | |||
| 680 | "/var/lib/upower" | 673 | "/var/lib/upower" |
| 681 | "/var/lib/postfix" | 674 | "/var/lib/postfix" |
| 682 | "/etc/NetworkManager/system-connections" | 675 | "/etc/NetworkManager/system-connections" |
| 683 | { directory = "/var/uucp"; user = "uucp"; group = "uucp"; mode = "0700"; } | ||
| 684 | { directory = "/var/spool/uucp"; user = "uucp"; group = "uucp"; mode = "0750"; } | ||
| 685 | ]; | 676 | ]; |
| 686 | files = [ | 677 | files = [ |
| 687 | ]; | 678 | ]; |
