nixos-config/machines/orbi/hardware-configuration/default.nix

79 lines
2.3 KiB
Nix
Raw Normal View History

2024-06-08 23:17:42 +02:00
{ config, pkgs, modulesPath, lib, factsGenerator, ... }:
2023-12-09 17:15:50 +01:00
let
# in rescue shell
# ---------------
2023-12-09 17:15:50 +01:00
# apt install -y lshw
# lshw -C network | grep -Poh 'driver=[[:alnum:]]+'
networkInterfaceModule = "e1000e";
2024-03-02 12:57:01 +01:00
# ip addr
networkInterface = "enp0s31f6";
2023-12-09 17:15:50 +01:00
# From the Hetzner control panel
ipv4 = {
2024-02-16 22:21:05 +01:00
address = "95.216.66.212"; # the ip address
gateway = "95.216.66.193"; # the gateway ip address
netmask = "255.255.255.192"; # the netmask -- might not be the same for you!
prefixLength = 26; # must match the netmask, see <https://www.pawprint.net/designresources/netmask-converter.php>
2023-12-09 17:15:50 +01:00
};
ipv6 = {
2024-02-16 22:21:05 +01:00
address = "2a01:4f9:2b:326::2"; # the ipv6 addres
2023-12-09 17:15:50 +01:00
gateway = "fe80::1"; # the ipv6 gateway
prefixLength = 64; # shown in the control panel
};
in
{
2024-03-02 12:57:01 +01:00
system.stateVersion = "23.11";
imports = [
./disko-config.nix
./hardware-configuration.nix
];
2024-03-03 14:56:49 +01:00
services.smartd.enable = true;
2023-12-09 17:15:50 +01:00
# Use GRUB2 as the boot loader.
# We don't use systemd-boot because Hetzner uses BIOS legacy boot.
2024-02-24 03:20:01 +01:00
boot.loader.grub = {
enable = true;
2024-02-26 09:44:59 +01:00
efiSupport = false; # we created a ef02 partition because uefi is not supported on hetzner online machines.
2024-02-24 03:20:01 +01:00
};
2023-12-09 17:15:50 +01:00
# Initial empty root password for easy login:
users.users.root.initialHashedPassword = "";
services.openssh.settings.PermitRootLogin = "prohibit-password";
services.openssh.settings.PasswordAuthentication = false;
2024-03-02 21:19:12 +01:00
boot.tmp.useTmpfs = true; # make /tmp a tmpfs (performance!)
2023-12-09 17:15:50 +01:00
2024-03-02 21:19:12 +01:00
boot.supportedFilesystems = [ "zfs" ];
2024-06-08 23:17:42 +02:00
clanCore.facts.services.zfs = factsGenerator.zfs { };
networking.hostId = config.clanCore.facts.services.zfs.public."zfs.hostId".value;
2023-12-09 17:15:50 +01:00
2024-03-02 21:19:12 +01:00
systemd.network.networks."10-uplink".networkConfig.Address = ipv6.address;
2024-06-08 23:17:42 +02:00
boot.initrd.systemd.network.networks."10-uplink" = config.systemd.network.networks."10-uplink";
2024-06-08 23:17:42 +02:00
# todo: use ssh component
boot.initrd.kernelModules = [ networkInterfaceModule ];
boot.initrd.network = {
enable = true;
ssh = {
enable = true;
authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys;
port = 2222;
hostKeys = [
# make sure you use --copy-host-keys during nixos-anywhere
# (you can create ne ssh keys later, again)
2024-03-03 21:58:52 +01:00
# rm /etc/ssh/ssh_host_* && systemctl restart sshd.service
/etc/ssh/ssh_host_rsa_key
/etc/ssh/ssh_host_ed25519_key
];
};
};
2023-12-09 17:15:50 +01:00
2024-03-02 12:57:01 +01:00
}