luj/snowfield
1
0
Fork 0
mirror of https://github.com/JulienMalka/snowfield.git synced 2025-09-16 02:34:59 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: reinit gallifrey

Browse source
This commit is contained in:
Luj 2025-09-15 15:48:21 +02:00
parent 311f5842fc
commit e6ef41a050
Signed by: luj
GPG key ID: 6FC74C847011FD83
5 changed files with 54 additions and 100 deletions
Download patch file Download diff file Expand all files Collapse all files

30
machines/gallifrey/default.nix
View file

@ -34,30 +34,6 @@
services.resolved.enable = true;
#services.userborn.enable = true;
networking.interfaces.eno1.wakeOnLan.enable = true;
boot.kernelParams = [
# # See <https://www.kernel.org/doc/Documentation/filesystems/nfs/nfsroot.txt> for docs on this
# # ip=<client-ip>:<server-ip>:<gw-ip>:<netmask>:<hostname>:<device>:<autoconf>:<dns0-ip>:<dns1-ip>:<ntp0-ip>
# # The server ip refers to the NFS server -- we don't need it.
# # "ip=${ipv4.address}::${ipv4.gateway}:${ipv4.netmask}:${hostName}-initrd:${networkInterface}:off:1.1.1.1"
## initrd luks_remote_unlock
"ip=192.168.4.10::192.168.0.1:255.255.248.0:gallifrey-initrd:eno1:none"
];
boot.initrd.kernelModules = [
"r8169"
];
boot.initrd.network = {
enable = true;
ssh = {
enable = true;
port = 2222;
authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys;
hostKeys = [ "/persistent/initrd/ssh_host_ed25519_key" ];
};
};
security.pam.loginLimits = [
{
domain = "*";
@ -90,12 +66,9 @@
};
programs.xwayland.enable = true;
services.postgresql.enable = true;
programs.dconf.enable = true;
services.udev.packages = [ pkgs.nitrokey-udev-rules ];
security.polkit.enable = true;
nix = {
@ -139,7 +112,6 @@
programs.firefox = {
enable = true;
package = pkgs.firefox;
nativeMessagingHosts.packages = [ pkgs.firefoxpwa ];
};
environment.persistence."/persistent" = {
@ -159,5 +131,5 @@
fileSystems."/persistent".neededForBoot = true;
system.stateVersion = "24.11";
system.stateVersion = "25.11";
}