porthos: split into modules

I have separated the modules into host-specific settings, and generic
settings that ought to be shared by every host.

I only have the 'porthos' host for now, but intend to also add my laptop
'aramis' at some point to this repository.
This commit is contained in:
Bruno BELANYI 2021-02-06 15:35:38 +01:00
parent d1d33fd1d1
commit 3b148ad684
14 changed files with 224 additions and 178 deletions

View file

@ -1,150 +0,0 @@
# Edit this configuration file to define what should be installed on
# your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running nixos-help).
{ config, lib, pkgs, ... }:
let
my = config.my;
in
{
imports =
[
# Include the results of the hardware scan.
./hardware-configuration.nix
# Include my secrets
./secrets
# Include my services
./services
];
nix = {
package = pkgs.nixFlakes;
extraOptions = ''
experimental-features = nix-command flakes
'';
};
# Use the GRUB 2 boot loader.
boot.loader.grub.enable = true;
boot.loader.grub.version = 2;
# Define on which hard drive you want to install Grub.
boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
networking.hostName = "porthos"; # Define your hostname.
networking.domain = "test.belanyi.fr"; # Define your domain.
# Set your time zone.
time.timeZone = "Europe/Paris";
# The global useDHCP flag is deprecated, therefore explicitly set to false here.
# Per-interface useDHCP will be mandatory in the future, so this generated config
# replicates the default behaviour.
networking.useDHCP = false;
networking.interfaces.bond0.useDHCP = true;
networking.interfaces.bonding_masters.useDHCP = true;
networking.interfaces.dummy0.useDHCP = true;
networking.interfaces.erspan0.useDHCP = true;
networking.interfaces.eth0.useDHCP = true;
networking.interfaces.eth1.useDHCP = true;
networking.interfaces.gre0.useDHCP = true;
networking.interfaces.gretap0.useDHCP = true;
networking.interfaces.ifb0.useDHCP = true;
networking.interfaces.ifb1.useDHCP = true;
networking.interfaces.ip6tnl0.useDHCP = true;
networking.interfaces.sit0.useDHCP = true;
networking.interfaces.teql0.useDHCP = true;
networking.interfaces.tunl0.useDHCP = true;
# Select internationalisation properties.
i18n.defaultLocale = "en_US.UTF-8";
users.mutableUsers = false; # I want it to be declarative.
# Define user accounts and passwords.
users.users.root.hashedPassword = my.secrets.users.root.hashedPassword;
users.users.ambroisie = {
hashedPassword = my.secrets.users.ambroisie.hashedPassword;
description = "Bruno BELANYI";
isNormalUser = true;
extraGroups = [ "wheel" ]; # Enable sudo for the user.
openssh.authorizedKeys.keys = with builtins; let
contents = readDir ./ssh;
names = attrNames contents;
files = filter (name: contents.${name} == "regular") names;
keys = map (basename: readFile (./ssh + "/${basename}")) files;
in
keys;
};
# List packages installed in system profile. To search, run:
# $ nix search wget
environment.systemPackages = with pkgs; [
git
git-crypt
mosh
vim
wget
];
# List services that you want to enable:
my.services = {
# Gitea forge
gitea.enable = true;
# Meta-indexers
indexers = {
jackett.enable = true;
nzbhydra.enable = true;
};
# Jellyfin media server
jellyfin.enable = true;
# Matrix backend and Element chat front-end
matrix = {
enable = true;
secret = my.secrets.matrix.secret;
};
# Nextcloud self-hosted cloud
nextcloud = {
enable = true;
password = my.secrets.nextcloud.password;
};
# The whole *arr software suite
pirate.enable = true;
# Regular backups
postgresql-backup.enable = true;
# An IRC client daemon
quassel.enable = true;
# RSS provider for websites that do not provide any feeds
rss-bridge.enable = true;
# Usenet client
sabnzbd.enable = true;
# Torrent client and webui
transmission = {
enable = true;
username = "Ambroisie";
password = my.secrets.transmission.password;
};
};
programs.gnupg.agent = {
enable = true;
enableSSHSupport = true;
};
programs.mosh.enable = true; # Opens the relevant UDP ports.
# Enable the OpenSSH daemon.
services.openssh.enable = true;
services.openssh.permitRootLogin = "no";
services.openssh.passwordAuthentication = false;
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. Its perfectly fine and recommended to leave
# this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
system.stateVersion = "20.09"; # Did you read the comment?
nixpkgs.config.allowUnfree = true; # Because I don't care *that* much.
}

View file

@ -19,7 +19,7 @@
else throw "Refusing to build from a dirty Git tree!"; else throw "Refusing to build from a dirty Git tree!";
}) })
{ nixpkgs.overlays = [ nur.overlay ]; } { nixpkgs.overlays = [ nur.overlay ]; }
./configuration.nix ./porthos.nix
]; ];
}; };
}; };

View file

@ -1,27 +0,0 @@
# Do not modify this file! It was generated by nixos-generate-config
# and may be overwritten by future invocations. Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
imports =
[
(modulesPath + "/installer/scan/not-detected.nix")
];
boot.initrd.availableKernelModules = [ "uhci_hcd" "ahci" "usbhid" ];
boot.initrd.kernelModules = [ "dm-snapshot" ];
boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ];
fileSystems."/" =
{
device = "/dev/disk/by-uuid/d89efc61-6b03-4190-b488-301c919e2431";
fsType = "ext4";
};
swapDevices =
[{ device = "/dev/disk/by-uuid/1a261204-2e78-496f-8a8d-d29bfa770306"; }];
powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand";
}

11
modules/default.nix Normal file
View file

@ -0,0 +1,11 @@
# Common modules
{ ... }:
{
imports = [
./language.nix
./nix.nix
./packages.nix
./users.nix
];
}

7
modules/language.nix Normal file
View file

@ -0,0 +1,7 @@
# Language settings
{ ... }:
{
# Select internationalisation properties.
i18n.defaultLocale = "en_US.UTF-8";
}

11
modules/nix.nix Normal file
View file

@ -0,0 +1,11 @@
# Nix related settings
{ pkgs, ... }:
{
nix = {
package = pkgs.nixFlakes;
extraOptions = ''
experimental-features = nix-command flakes
'';
};
}

16
modules/packages.nix Normal file
View file

@ -0,0 +1,16 @@
# Common packages
{ pkgs, ... }:
{
# List packages installed in system profile. To search, run:
# $ nix search wget
environment.systemPackages = with pkgs; [
git
git-crypt
mosh
vim
wget
];
nixpkgs.config.allowUnfree = true; # Because I don't care *that* much.
}

25
modules/users.nix Normal file
View file

@ -0,0 +1,25 @@
# User setup
{ config, ... }:
let
my = config.my;
in
{
users.mutableUsers = false; # I want it to be declarative.
# Define user accounts and passwords.
users.users.root.hashedPassword = my.secrets.users.root.hashedPassword;
users.users.ambroisie = {
hashedPassword = my.secrets.users.ambroisie.hashedPassword;
description = "Bruno BELANYI";
isNormalUser = true;
extraGroups = [ "wheel" ]; # Enable sudo for the user.
openssh.authorizedKeys.keys = with builtins; let
keyDir = ../ssh;
contents = readDir keyDir;
names = attrNames contents;
files = filter (name: contents.${name} == "regular") names;
keys = map (basename: readFile (keyDir + "/${basename}")) files;
in
keys;
};
}

23
porthos.nix Normal file
View file

@ -0,0 +1,23 @@
# Porthos self-hosted server
{ ... }:
{
imports = [
# Include generic settings
./modules
# Include porthos-specific modules
./porthos
# Include my secrets
./secrets
# Include my services
./services
];
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. Its perfectly fine and recommended to leave
# this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
system.stateVersion = "20.09"; # Did you read the comment?
}

15
porthos/boot.nix Normal file
View file

@ -0,0 +1,15 @@
# Boot configuration
{ ... }:
{
# Use the GRUB 2 boot loader.
boot.loader.grub.enable = true;
boot.loader.grub.version = 2;
# Define on which hard drive you want to install Grub.
boot.loader.grub.device = "/dev/sda";
boot.initrd.availableKernelModules = [ "uhci_hcd" "ahci" "usbhid" ];
boot.initrd.kernelModules = [ "dm-snapshot" ];
boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ];
}

11
porthos/default.nix Normal file
View file

@ -0,0 +1,11 @@
# Porthos specific settings
{ ... }:
{
imports = [
./boot.nix
./hardware.nix
./networking.nix
./services.nix
];
}

20
porthos/hardware.nix Normal file
View file

@ -0,0 +1,20 @@
# Hardware configuration
{ lib, modulesPath, ... }:
{
imports =
[
(modulesPath + "/installer/scan/not-detected.nix")
];
fileSystems."/" =
{
device = "/dev/disk/by-uuid/d89efc61-6b03-4190-b488-301c919e2431";
fsType = "ext4";
};
swapDevices =
[{ device = "/dev/disk/by-uuid/1a261204-2e78-496f-8a8d-d29bfa770306"; }];
powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand";
}

27
porthos/networking.nix Normal file
View file

@ -0,0 +1,27 @@
# Networking configuration
{ ... }:
{
networking.hostName = "porthos"; # Define your hostname.
networking.domain = "test.belanyi.fr"; # Define your domain.
# The global useDHCP flag is deprecated, therefore explicitly set to false here.
# Per-interface useDHCP will be mandatory in the future, so this generated config
# replicates the default behaviour.
networking.useDHCP = false;
networking.interfaces.bond0.useDHCP = true;
networking.interfaces.bonding_masters.useDHCP = true;
networking.interfaces.dummy0.useDHCP = true;
networking.interfaces.erspan0.useDHCP = true;
networking.interfaces.eth0.useDHCP = true;
networking.interfaces.eth1.useDHCP = true;
networking.interfaces.gre0.useDHCP = true;
networking.interfaces.gretap0.useDHCP = true;
networking.interfaces.ifb0.useDHCP = true;
networking.interfaces.ifb1.useDHCP = true;
networking.interfaces.ip6tnl0.useDHCP = true;
networking.interfaces.sit0.useDHCP = true;
networking.interfaces.teql0.useDHCP = true;
networking.interfaces.tunl0.useDHCP = true;
}

57
porthos/services.nix Normal file
View file

@ -0,0 +1,57 @@
# Deployed services
{ config, ... }:
let
my = config.my;
in
{
# List services that you want to enable:
my.services = {
# Gitea forge
gitea.enable = true;
# Meta-indexers
indexers = {
jackett.enable = true;
nzbhydra.enable = true;
};
# Jellyfin media server
jellyfin.enable = true;
# Matrix backend and Element chat front-end
matrix = {
enable = true;
secret = my.secrets.matrix.secret;
};
# Nextcloud self-hosted cloud
nextcloud = {
enable = true;
password = my.secrets.nextcloud.password;
};
# The whole *arr software suite
pirate.enable = true;
# Regular backups
postgresql-backup.enable = true;
# An IRC client daemon
quassel.enable = true;
# RSS provider for websites that do not provide any feeds
rss-bridge.enable = true;
# Usenet client
sabnzbd.enable = true;
# Torrent client and webui
transmission = {
enable = true;
username = "Ambroisie";
password = my.secrets.transmission.password;
};
};
programs.gnupg.agent = {
enable = true;
enableSSHSupport = true;
};
programs.mosh.enable = true; # Opens the relevant UDP ports.
# Enable the OpenSSH daemon.
services.openssh.enable = true;
services.openssh.permitRootLogin = "no";
services.openssh.passwordAuthentication = false;
}