summaryrefslogtreecommitdiff
path: root/hosts/skadhi/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/skadhi/default.nix')
-rw-r--r--hosts/skadhi/default.nix45
1 files changed, 22 insertions, 23 deletions
diff --git a/hosts/skadhi/default.nix b/hosts/skadhi/default.nix
index 66aa58d7..1f3f5306 100644
--- a/hosts/skadhi/default.nix
+++ b/hosts/skadhi/default.nix
@@ -1,36 +1,24 @@
1{ flake, flakeInputs, pkgs, config, lib, ... }: 1{ flake, flakeInputs, pkgs, config, lib, ... }:
2{ 2{
3 imports = with flake.nixosModules.systemProfiles; [ 3 imports = with flake.nixosModules.systemProfiles; [
4 ./hw.nix 4 ./hw.nix ./fs.nix ./networking
5 tmpfs-root default-locale openssh niri-unstable networkmanager lanzaboote zswap 5 tmpfs-root default-locale openssh lanzaboote zswap initrd-all-crypto-modules
6 flakeInputs.nixVirt.nixosModules.default
7 ]; 6 ];
8 7
9 config = { 8 config = {
10 system.stateVersion = "26.05"; 9 system.stateVersion = "26.05";
11 10
12 fileSystems."/persistent".neededForBoot = true;
13 environment.persistence."/persistent" = {
14 hideMounts = true;
15 directories = [
16 "/nix"
17 "/root"
18 "/var/log"
19 "/var/lib/nixos"
20 "/var/lib/sops-nix"
21 "/var/lib/systemd"
22 config.boot.lanzaboote.pkiBundle
23 ];
24 timezone = true;
25 };
26
27 boot = { 11 boot = {
28 initrd.systemd = { 12 initrd = {
29 emergencyAccess = config.users.users.root.hashedPassword; 13 systemd = {
30 extraBin = { 14 emergencyAccess = config.users.users.root.hashedPassword;
31 "vim" = lib.getExe pkgs.vim; 15 extraBin = {
32 "grep" = lib.getExe pkgs.gnugrep; 16 "vim" = lib.getExe pkgs.vim;
17 "grep" = lib.getExe pkgs.gnugrep;
18 };
33 }; 19 };
20
21 kernelModules = [ "dm-integrity" ];
34 }; 22 };
35 23
36 lanzaboote.configurationLimit = 15; 24 lanzaboote.configurationLimit = 15;
@@ -83,5 +71,16 @@
83 }; 71 };
84 72
85 services.userborn.importLegacyState = false; 73 services.userborn.importLegacyState = false;
74
75 services.kmscon = {
76 enable = true;
77 config.hwaccel = true;
78 };
79
80 environment.persistence."/persistent".timezone = true;
81 time.timeZone = null;
82 systemd.tmpfiles.settings = {
83 "10-localtime"."/etc/localtime".L.argument = "/persistent/etc/localtime";
84 };
86 }; 85 };
87} 86}