diff --git a/lib/luj.nix b/lib/luj.nix index 6606cde..ae206a8 100644 --- a/lib/luj.nix +++ b/lib/luj.nix @@ -57,6 +57,16 @@ let vpn = "fd7a:115c:a1e0::c"; }; }; + lisanew = { + inherit tld; + arch = "x86_64-linux"; + nixpkgs_version = inputs.nixpkgs; + hm_version = inputs.home-manager; + ipv4 = { + public = "163.172.91.82"; + }; + }; + x2100 = { inherit tld; arch = "x86_64-linux"; diff --git a/machines/lisanew/default.nix b/machines/lisanew/default.nix new file mode 100644 index 0000000..1e3929d --- /dev/null +++ b/machines/lisanew/default.nix @@ -0,0 +1,31 @@ +{ ... }: +{ + imports = [ + ./hardware.nix + ./home-julien.nix + ]; + + deployment.tags = [ "server" ]; + + disko = import ./disko.nix; + + services.fail2ban.enable = true; + + networking.useNetworkd = true; + systemd.network = { + enable = true; + + networks = { + "10-wan" = { + matchConfig.Name = "enp0s20"; + networkConfig = { + DHCP = "ipv4"; + }; + + linkConfig.RequiredForOnline = "routable"; + }; + }; + }; + + system.stateVersion = "24.05"; +} diff --git a/machines/lisanew/disko.nix b/machines/lisanew/disko.nix new file mode 100644 index 0000000..5c32172 --- /dev/null +++ b/machines/lisanew/disko.nix @@ -0,0 +1,36 @@ +{ + devices = { + disk = { + main = { + type = "disk"; + device = "/dev/disk/by-id/ata-HGST_HTE721010A9E630_JR10034M34EVTK"; + content = { + type = "gpt"; + partitions = { + boot = { + size = "1M"; + type = "EF02"; # for grub MBR + }; + ESP = { + size = "512M"; + type = "EF00"; + content = { + type = "filesystem"; + format = "vfat"; + mountpoint = "/boot"; + }; + }; + root = { + size = "100%"; + content = { + type = "filesystem"; + format = "ext4"; + mountpoint = "/"; + }; + }; + }; + }; + }; + }; + }; +} diff --git a/machines/lisanew/hardware.nix b/machines/lisanew/hardware.nix new file mode 100644 index 0000000..fb11274 --- /dev/null +++ b/machines/lisanew/hardware.nix @@ -0,0 +1,22 @@ +{ + config, + lib, + modulesPath, + ... +}: + +{ + imports = [ (modulesPath + "/installer/scan/not-detected.nix") ]; + boot.loader.grub.enable = true; + boot.initrd.availableKernelModules = [ "ahci" ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ "kvm-intel" ]; + boot.extraModulePackages = [ ]; + + swapDevices = [ { device = "/dev/disk/by-uuid/b2563fcf-18af-43da-b2d2-3e7b84f72421"; } ]; + + networking.useDHCP = lib.mkDefault true; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; + hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; +} diff --git a/machines/lisanew/home-julien.nix b/machines/lisanew/home-julien.nix new file mode 100644 index 0000000..d01ee3a --- /dev/null +++ b/machines/lisanew/home-julien.nix @@ -0,0 +1,8 @@ +_: { + + luj.hmgr.julien = { + luj.programs.neovim.enable = true; + luj.programs.ssh-client.enable = true; + luj.programs.git.enable = true; + }; +}