diff options
Diffstat (limited to 'hosts/skadhi/default.nix')
| -rw-r--r-- | hosts/skadhi/default.nix | 33 |
1 files changed, 14 insertions, 19 deletions
diff --git a/hosts/skadhi/default.nix b/hosts/skadhi/default.nix index 62823488..1f3f5306 100644 --- a/hosts/skadhi/default.nix +++ b/hosts/skadhi/default.nix | |||
| @@ -1,29 +1,13 @@ | |||
| 1 | { flake, flakeInputs, pkgs, config, lib, ... }: | 1 | { flake, flakeInputs, pkgs, config, lib, ... }: |
| 2 | { | 2 | { |
| 3 | imports = with flake.nixosModules.systemProfiles; [ | 3 | imports = with flake.nixosModules.systemProfiles; [ |
| 4 | ./hw.nix | 4 | ./hw.nix ./fs.nix ./networking |
| 5 | tmpfs-root default-locale openssh niri-unstable networkmanager lanzaboote zswap | 5 | tmpfs-root default-locale openssh lanzaboote zswap initrd-all-crypto-modules |
| 6 | flakeInputs.nixVirt.nixosModules.default | ||
| 7 | ]; | 6 | ]; |
| 8 | 7 | ||
| 9 | config = { | 8 | config = { |
| 10 | system.stateVersion = "26.05"; | 9 | system.stateVersion = "26.05"; |
| 11 | 10 | ||
| 12 | fileSystems."/persistent".neededForBoot = true; | ||
| 13 | environment.persistence."/persistent" = { | ||
| 14 | hideMounts = true; | ||
| 15 | directories = [ | ||
| 16 | "/nix" | ||
| 17 | "/root" | ||
| 18 | "/var/log" | ||
| 19 | "/var/lib/nixos" | ||
| 20 | "/var/lib/sops-nix" | ||
| 21 | "/var/lib/systemd" | ||
| 22 | config.boot.lanzaboote.pkiBundle | ||
| 23 | ]; | ||
| 24 | timezone = true; | ||
| 25 | }; | ||
| 26 | |||
| 27 | boot = { | 11 | boot = { |
| 28 | initrd = { | 12 | initrd = { |
| 29 | systemd = { | 13 | systemd = { |
| @@ -34,7 +18,7 @@ | |||
| 34 | }; | 18 | }; |
| 35 | }; | 19 | }; |
| 36 | 20 | ||
| 37 | luks.cryptoModules = [ "aegis128" ]; | 21 | kernelModules = [ "dm-integrity" ]; |
| 38 | }; | 22 | }; |
| 39 | 23 | ||
| 40 | lanzaboote.configurationLimit = 15; | 24 | lanzaboote.configurationLimit = 15; |
| @@ -87,5 +71,16 @@ | |||
| 87 | }; | 71 | }; |
| 88 | 72 | ||
| 89 | services.userborn.importLegacyState = false; | 73 | services.userborn.importLegacyState = false; |
| 74 | |||
| 75 | services.kmscon = { | ||
| 76 | enable = true; | ||
| 77 | config.hwaccel = true; | ||
| 78 | }; | ||
| 79 | |||
| 80 | environment.persistence."/persistent".timezone = true; | ||
| 81 | time.timeZone = null; | ||
| 82 | systemd.tmpfiles.settings = { | ||
| 83 | "10-localtime"."/etc/localtime".L.argument = "/persistent/etc/localtime"; | ||
| 84 | }; | ||
| 90 | }; | 85 | }; |
| 91 | } | 86 | } |
