109 lines
3.9 KiB
Nix
109 lines
3.9 KiB
Nix
{ config, pkgs, lib, ... }:
|
|
{
|
|
# NixOS wants to enable GRUB by default
|
|
boot.loader.grub.enable = false;
|
|
# Enables the generation of /boot/extlinux/extlinux.conf
|
|
boot.loader.generic-extlinux-compatible.enable = true;
|
|
|
|
# A bunch of boot parameters needed for optimal runtime on RPi 3B
|
|
boot.kernelParams = ["cma=32M" "zfs.zfs_arc_max=134217728"];
|
|
boot.loader.raspberryPi = {
|
|
enable = true;
|
|
version = 3;
|
|
uboot.enable = true;
|
|
firmwareConfig = ''
|
|
hdmi_force_hotplug=1
|
|
'';
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
raspberrypi-tools
|
|
git
|
|
htop
|
|
vim
|
|
];
|
|
|
|
# !!! Adding a swap file is optional, but strongly recommended!
|
|
swapDevices = [ { device = "/swapfile"; size = 1024; } ];
|
|
|
|
# Configure basic SSH access
|
|
services.openssh = {
|
|
enable = true;
|
|
permitRootLogin = "yes";
|
|
};
|
|
|
|
# Cleanup tmp on startup
|
|
boot.cleanTmpDir = true;
|
|
|
|
# Set hostname
|
|
networking.hostName = "zion";
|
|
|
|
# Create coolneng user
|
|
users.users.coolneng = {
|
|
isNormalUser = true;
|
|
home = "/home/coolneng";
|
|
extraGroups = [ "wheel" "lp" "scanner" "docker" ];
|
|
openssh.authorizedKeys.keys = [ "ssh-rsa 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 coolneng@monolith" ];
|
|
shell = "/run/current-system/sw/bin/fish";
|
|
};
|
|
|
|
# Set vim as default editor
|
|
programs.vim.defaultEditor = true;
|
|
|
|
# Set timezone and synchronize NTP
|
|
time.timeZone = "Europe/Brussels";
|
|
services.timesyncd.enable = true;
|
|
|
|
# Enable ZFS support
|
|
networking.hostId = "bb26c304";
|
|
boot = {
|
|
supportedFilesystems = [ "zfs" ];
|
|
zfs.extraPools = [ "vault" ];
|
|
};
|
|
|
|
# Scrub zpool monthly
|
|
services.zfs.autoScrub = {
|
|
enable = true;
|
|
interval = "monthly";
|
|
};
|
|
|
|
# Auto-upgrade the system and reboot if needed
|
|
system.autoUpgrade = {
|
|
enable = true;
|
|
allowReboot = true;
|
|
};
|
|
|
|
# Run Nix garbage collector, while avoiding compiling
|
|
nix = {
|
|
gc = {
|
|
automatic = true;
|
|
options = "--delete-older-than 30d";
|
|
};
|
|
extraOptions = ''
|
|
keep-outputs = true
|
|
gc-keep-outputs = true
|
|
'';
|
|
};
|
|
|
|
# Configure fish shell
|
|
programs.fish.enable = true;
|
|
users.users.root = {
|
|
shell = "/run/current-system/sw/bin/fish";
|
|
openssh.authorizedKeys.keys = [ "ssh-rsa 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 coolneng@monolith" ];
|
|
};
|
|
|
|
# Rotate logs after 7 days
|
|
services.journald.extraConfig = "SystemMaxFiles=7";
|
|
|
|
# Import other configuration modules
|
|
imports = [
|
|
./modules/printing.nix
|
|
./modules/networking.nix
|
|
./modules/datasync.nix
|
|
./modules/hardware-configuration.nix
|
|
./modules/webstack.nix
|
|
./modules/devops.nix
|
|
];
|
|
|
|
}
|