diff --git a/flake.nix b/flake.nix index a04dbf7..73eeab4 100644 --- a/flake.nix +++ b/flake.nix @@ -322,6 +322,7 @@ sternchen = nixosConfigurationSetup { name = "sternchen"; host = "sternchen.secret"; + #host = "192.168.178.25"; modules = [ nixos-hardware.nixosModules.lenovo-thinkpad-x220 homeManagerModules diff --git a/nixos/components/gui/cups.nix b/nixos/components/gui/cups.nix new file mode 100644 index 0000000..5123e7f --- /dev/null +++ b/nixos/components/gui/cups.nix @@ -0,0 +1,28 @@ +{ config, lib, ... }: +with lib; +{ + + options.components.gui.cups.enable = mkOption { + type = lib.types.bool; + default = config.components.gui.enable; + }; + + config = mkIf (config.components.gui.cups.enable) { + + hardware.printers.ensurePrinters = [ + { + description = "Lexmark E350d"; + deviceUri = "usb://Lexmark/E350d?serial=622Z9ZC"; + location = "office"; + name = "Lexmark_E350d"; + model = "drv:///sample.drv/generic.ppd"; + ppdOptions = { + job-sheets = "none, none"; + media = "na_letter_8.5x11in"; + sides = "one-sided"; + }; + } + ]; + + }; +} diff --git a/nixos/components/gui/default.nix b/nixos/components/gui/default.nix index 1a0907e..aed0201 100644 --- a/nixos/components/gui/default.nix +++ b/nixos/components/gui/default.nix @@ -9,6 +9,7 @@ with lib; # todo : structure with home-manager and such is not cool, create another structure ./audio.nix ./browser.nix + ./cups.nix ./fonts.nix ./home-manager ./kmonad.nix diff --git a/nixos/components/network/tinc/secret.nix b/nixos/components/network/tinc/secret.nix index 695bf31..e04fcd2 100644 --- a/nixos/components/network/tinc/secret.nix +++ b/nixos/components/network/tinc/secret.nix @@ -9,10 +9,11 @@ let port = 721; hosts = { - sternchen = "10.123.42.25"; - sterni = "10.123.42.24"; + cherry = "10.123.42.29"; cream = "10.123.42.27"; robi = "10.123.42.123"; + sternchen = "10.123.42.25"; + sterni = "10.123.42.24"; }; network = "secret"; in @@ -35,6 +36,10 @@ in subnets = [{ address = hosts.cream; }]; settings.Ed25519PublicKey = "Y/YRA90mAlNEmdhUWlUTHjjsco6d6hlvW11sPtarIdL"; }; + cherry = { + subnets = [{ address = hosts.cherry; }]; + settings.Ed25519PublicKey = "BsPIrZjbzn0aryC0HO3OXSb4oFCMmzNDmMDQmxUXUuC"; + }; sterni = { subnets = [{ address = hosts.sterni; }]; settings.Ed25519PublicKey = "r6mRDc814z2YtyG9ev/XXV2SgquqWR8n53V13xNXb7O"; diff --git a/nixos/components/terminal/zsh.nix b/nixos/components/terminal/zsh.nix index 6996fc4..e977062 100644 --- a/nixos/components/terminal/zsh.nix +++ b/nixos/components/terminal/zsh.nix @@ -8,6 +8,9 @@ with lib; config = mkIf (config.components.terminal.zsh.enable) { + # root uses zsh on default + users.users.root.shell = pkgs.zsh; + programs.zsh = { enable = true; diff --git a/nixos/homes/palo/default.nix b/nixos/homes/palo/default.nix index bc0a50f..cf7bef2 100644 --- a/nixos/homes/palo/default.nix +++ b/nixos/homes/palo/default.nix @@ -9,6 +9,7 @@ ./packages ./ssh.nix ./stylix.nix + ./tmux.nix ./vim.nix ./yubikey.nix ./zellij.nix diff --git a/nixos/homes/palo/packages/development.nix b/nixos/homes/palo/packages/development.nix index e0865b7..c182d2b 100644 --- a/nixos/homes/palo/packages/development.nix +++ b/nixos/homes/palo/packages/development.nix @@ -7,102 +7,44 @@ with lib; (mkIf config.gui.enable { - home.packages = - let + home.packages = [ - # to make copilot work - # jetbrains.pycharm-professional - #fhsPyCharm = pkgs.buildFHSUserEnv { - # name = "pycharm"; - # targetPkgs = pkgs: (with pkgs; [ - # black - # isort - # #unstable.jetbrains.pycharm-professional - # jetbrains.pycharm-professional - # python311 - # pipenv - # zlib # needed for NumPy - # nodejs - # git - # ]); - # runScript = "pycharm-professional"; - #}; + # general + unstable.jetbrains.idea-ultimate + #vscode - # jetbrains.datagrip - #fhsDataGrip = pkgs.buildFHSUserEnv { - # name = "datagrip"; - # targetPkgs = pkgs: (with pkgs; [ - # unstable.jetbrains.datagrip - # ]); - # runScript = "datagrip"; - #}; + jetbrains.mps - #fhsClion = pkgs.buildFHSUserEnv { - # name = "clion"; - # targetPkgs = pkgs: (with pkgs; [ - # unstable.jetbrains.clion - # ]); - # runScript = "clion"; - #}; + unstable.jetbrains.datagrip - in - [ + # Rust + # ---- + unstable.jetbrains.clion + gcc + rustup - # general - unstable.jetbrains.idea-ultimate - #vscode + # Python + # ------ + unstable.jetbrains.pycharm-professional - jetbrains.mps + # planing + ((ganttproject-bin.override { + jre = pkgs.openjdk11; + }).overrideAttrs (old: { + version = "3.1.3100"; + src = pkgs.fetchzip { + url = "https://dl.ganttproject.biz/ganttproject-3.1.3100/ganttproject-3.1.3100.zip"; + sha256 = "sha256-hw2paak0P670/kemiuqYHIaN0uUtkVKy+AX2X7OdnJ4="; + }; + })) - unstable.jetbrains.datagrip - #fhsDataGrip - #(pkgs.makeDesktopItem { - # name = "datagrip"; - # desktopName = "DataGrip"; - # exec = "${fhsDataGrip}/bin/datagrip"; - # terminal = false; - #}) + mermaid-cli - # Rust - unstable.jetbrains.clion - #fhsClion - #(pkgs.makeDesktopItem { - # name = "clion"; - # desktopName = "Clion"; - # exec = "${fhsClion}/bin/clion"; - # terminal = false; - #}) - gcc - rustup - - # python - - unstable.jetbrains.pycharm-professional - #fhsPyCharm - #(pkgs.makeDesktopItem { - # name = "pycharm"; - # desktopName = "PyCharm"; - # exec = "${fhsPyCharm}/bin/pycharm"; - # terminal = false; - #}) - - # planing - ((ganttproject-bin.override { - jre = pkgs.openjdk11; - }).overrideAttrs (old: { - version = "3.1.3100"; - src = pkgs.fetchzip { - url = "https://dl.ganttproject.biz/ganttproject-3.1.3100/ganttproject-3.1.3100.zip"; - sha256 = "sha256-hw2paak0P670/kemiuqYHIaN0uUtkVKy+AX2X7OdnJ4="; - }; - })) - - mermaid-cli - - ]; + ]; }) { + home.packages = let pandocScript = { inputFormat, outputFormat }: @@ -116,7 +58,7 @@ with lib; in [ - # smoke + lnav tmux @@ -160,6 +102,16 @@ with lib; nixpkgs-fmt treefmt + + (pkgs.writers.writeBashBin "ssl-check-cert-of-domain" '' + DOMAIN=$1 + echo | \ + ${pkgs.openssl}/bin/openssl s_client -servername ''${DOMAIN} -connect ''${DOMAIN}:443 2>/dev/null | \ + ${pkgs.openssl}/bin/openssl x509 -text | \ + ${pkgs.less}/bin/less + '') + + ] ++ (map pandocScript (lib.cartesianProductOfSets { inputFormat = [ "man" "markdown" "mediawiki" "asciidoc" ]; outputFormat = [ "mediawiki" "docbook5" "html5" "man" "jira" "markdown" ]; diff --git a/nixos/homes/palo/tmux.nix b/nixos/homes/palo/tmux.nix new file mode 100644 index 0000000..19ec8a3 --- /dev/null +++ b/nixos/homes/palo/tmux.nix @@ -0,0 +1,14 @@ +{ pkgs, ... }: +with pkgs; +{ + programs.tmux = { + enable = true; + aggressiveResize = true; + baseIndex = 1; + clock24 = true; + historyLimit = 150000; + keyMode = "vi"; + mouse = true; + secureSocket = true; + }; +} diff --git a/nixos/homes/root/default.nix b/nixos/homes/root/default.nix index e9809a5..8cc8a9e 100644 --- a/nixos/homes/root/default.nix +++ b/nixos/homes/root/default.nix @@ -4,4 +4,5 @@ ../palo/doom-emacs.nix ]; gui.enable = false; + } diff --git a/nixos/machines/cherry/configuration.nix b/nixos/machines/cherry/configuration.nix index 43c4f75..a55d66f 100644 --- a/nixos/machines/cherry/configuration.nix +++ b/nixos/machines/cherry/configuration.nix @@ -3,16 +3,13 @@ imports = [ - ../../modules ../../components + ../../modules - ./disko-config.nix - ./hardware-configuration.nix + ./hardware-configuration ./syncthing.nix - ./cups.nix ./tinc.nix - #./tinc_retiolum.nix ./qemu.nix ./wireguard.nix diff --git a/nixos/machines/cherry/cups.nix b/nixos/machines/cherry/cups.nix deleted file mode 100644 index 2c2e41d..0000000 --- a/nixos/machines/cherry/cups.nix +++ /dev/null @@ -1,16 +0,0 @@ -{ - hardware.printers.ensurePrinters = [ - { - description = "Lexmark E350d"; - deviceUri = "usb://Lexmark/E350d?serial=622Z9ZC"; - location = "office"; - name = "Lexmark_E350d"; - model = "drv:///sample.drv/generic.ppd"; - ppdOptions = { - job-sheets = "none, none"; - media = "na_letter_8.5x11in"; - sides = "one-sided"; - }; - } - ]; -} diff --git a/nixos/machines/cherry/hardware-configuration/default.nix b/nixos/machines/cherry/hardware-configuration/default.nix new file mode 100644 index 0000000..a1d76e6 --- /dev/null +++ b/nixos/machines/cherry/hardware-configuration/default.nix @@ -0,0 +1,26 @@ +{ lib, config, ... }: +{ + imports = [ + ./disko-config.nix + ./hardware-configuration.nix + ]; + + boot.tmp.useTmpfs = true; + boot.loader.systemd-boot.enable = true; + boot.loader.efi.canTouchEfiVariables = true; + + # ZFS stuff + # --------- + boot.supportedFilesystems = [ "zfs" ]; + # head -c4 /dev/urandom | od -A none -t x4 + networking.hostId = "59e38471"; + services.zfs.autoSnapshot.enable = true; + + # todo not needed anymore if srvos is used + # ZFS already has its own scheduler. Without this my(@Artturin) computer froze for a second when i nix build something. + # copied from : https://github.com/numtide/srvos/blob/main/nixos/common/zfs.nix + services.udev.extraRules = lib.optionalString (config.boot.zfs.enabled) '' + ACTION=="add|change", KERNEL=="sd[a-z]*[0-9]*|mmcblk[0-9]*p[0-9]*|nvme[0-9]*n[0-9]*p[0-9]*", ENV{ID_FS_TYPE}=="zfs_member", ATTR{../queue/scheduler}="none" + ''; + +} diff --git a/nixos/machines/cherry/disko-config.nix b/nixos/machines/cherry/hardware-configuration/disko-config.nix similarity index 65% rename from nixos/machines/cherry/disko-config.nix rename to nixos/machines/cherry/hardware-configuration/disko-config.nix index 5b1f2b4..9e705d0 100644 --- a/nixos/machines/cherry/disko-config.nix +++ b/nixos/machines/cherry/hardware-configuration/disko-config.nix @@ -1,24 +1,6 @@ -# nix run github:nix-community/disko -- --mode zap_create_mount ./disko-config.nix -# nixos-generate-config --no-filesystems --root /mnt { config, lib, ... }: { - boot.loader.systemd-boot.enable = true; - boot.loader.efi.canTouchEfiVariables = true; - boot.tmp.useTmpfs = true; # make /tmp a tmpfs (performance!) - - # ZFS stuff - # --------- - boot.supportedFilesystems = [ "zfs" ]; - # head -c4 /dev/urandom | od -A none -t x4 - networking.hostId = "59e38471"; - services.zfs.autoSnapshot.enable = true; - # ZFS already has its own scheduler. Without this my(@Artturin) computer froze for a second when i nix build something. - # copied from : https://github.com/numtide/srvos/blob/main/nixos/common/zfs.nix - services.udev.extraRules = lib.optionalString (config.boot.zfs.enabled) '' - ACTION=="add|change", KERNEL=="sd[a-z]*[0-9]*|mmcblk[0-9]*p[0-9]*|nvme[0-9]*n[0-9]*p[0-9]*", ENV{ID_FS_TYPE}=="zfs_member", ATTR{../queue/scheduler}="none" - ''; - # disko configuration # ------------------- disko.devices = { diff --git a/nixos/machines/cherry/hardware-configuration.nix b/nixos/machines/cherry/hardware-configuration/hardware-configuration.nix similarity index 100% rename from nixos/machines/cherry/hardware-configuration.nix rename to nixos/machines/cherry/hardware-configuration/hardware-configuration.nix diff --git a/nixos/machines/chungus/configuration.nix b/nixos/machines/chungus/configuration.nix index 45fb0e4..fede3e1 100644 --- a/nixos/machines/chungus/configuration.nix +++ b/nixos/machines/chungus/configuration.nix @@ -84,8 +84,6 @@ networking.hostName = "chungus"; - users.users.root.shell = pkgs.zsh; - hardware.opengl = { enable = true; extraPackages = with pkgs; [ diff --git a/nixos/machines/cream/configuration.nix b/nixos/machines/cream/configuration.nix index fae5b98..69bb336 100644 --- a/nixos/machines/cream/configuration.nix +++ b/nixos/machines/cream/configuration.nix @@ -9,7 +9,6 @@ ./hardware-configuration.nix ./syncthing.nix - ./cups.nix ./tinc.nix ./tinc_retiolum.nix diff --git a/nixos/machines/cream/cups.nix b/nixos/machines/cream/cups.nix deleted file mode 100644 index 2c2e41d..0000000 --- a/nixos/machines/cream/cups.nix +++ /dev/null @@ -1,16 +0,0 @@ -{ - hardware.printers.ensurePrinters = [ - { - description = "Lexmark E350d"; - deviceUri = "usb://Lexmark/E350d?serial=622Z9ZC"; - location = "office"; - name = "Lexmark_E350d"; - model = "drv:///sample.drv/generic.ppd"; - ppdOptions = { - job-sheets = "none, none"; - media = "na_letter_8.5x11in"; - sides = "one-sided"; - }; - } - ]; -} diff --git a/nixos/machines/orbi/configuration.nix b/nixos/machines/orbi/configuration.nix index b00e1bc..9af5071 100644 --- a/nixos/machines/orbi/configuration.nix +++ b/nixos/machines/orbi/configuration.nix @@ -52,21 +52,17 @@ networking.hostName = "orbi"; + components.terminal.enable = true; components.mainUser.enable = true; components.gui.enable = false; components.network.enable = true; components.network.wifi.enable = false; - users.users.root.shell = pkgs.zsh; - security.acme.acceptTerms = true; security.acme.defaults.email = "contact@ingolf-wagner.de"; + # todo create your own sops.defaultSopsFile = ../../secrets/robi.yaml; - services.smartd.enable = true; - - - } diff --git a/nixos/machines/orbi/hardware-configuration/default.nix b/nixos/machines/orbi/hardware-configuration/default.nix index 8f2141c..ab1819d 100644 --- a/nixos/machines/orbi/hardware-configuration/default.nix +++ b/nixos/machines/orbi/hardware-configuration/default.nix @@ -34,6 +34,8 @@ in ./hardware-configuration.nix ]; + services.smartd.enable = true; + # Use GRUB2 as the boot loader. # We don't use systemd-boot because Hetzner uses BIOS legacy boot. boot.loader.grub = { diff --git a/nixos/machines/orbi/hardware-configuration/disko-config.nix b/nixos/machines/orbi/hardware-configuration/disko-config.nix index 60a12d5..b94e6ca 100644 --- a/nixos/machines/orbi/hardware-configuration/disko-config.nix +++ b/nixos/machines/orbi/hardware-configuration/disko-config.nix @@ -4,7 +4,6 @@ let disks = [ "sda" "sdb" ]; in { - disko.devices = { disk = lib.genAttrs disks (disk: { diff --git a/nixos/machines/robi/configuration.nix b/nixos/machines/robi/configuration.nix index 4b3f70d..43658dc 100644 --- a/nixos/machines/robi/configuration.nix +++ b/nixos/machines/robi/configuration.nix @@ -66,11 +66,6 @@ services.sshguard.enable = true; - # Shell configuration - # ------------------- - #programs.custom. zsh.enable = true; - users.users.root.shell = pkgs.zsh; - security.acme.acceptTerms = true; security.acme.defaults.email = "contact@ingolf-wagner.de"; diff --git a/nixos/machines/sternchen/configuration.nix b/nixos/machines/sternchen/configuration.nix index 75babba..d2d4320 100644 --- a/nixos/machines/sternchen/configuration.nix +++ b/nixos/machines/sternchen/configuration.nix @@ -11,8 +11,6 @@ ./syncthing.nix ./tinc.nix - ./cups.nix - ]; sops.defaultSopsFile = ../../secrets/sternchen.yaml; diff --git a/nixos/machines/sternchen/cups.nix b/nixos/machines/sternchen/cups.nix deleted file mode 100644 index 2c2e41d..0000000 --- a/nixos/machines/sternchen/cups.nix +++ /dev/null @@ -1,16 +0,0 @@ -{ - hardware.printers.ensurePrinters = [ - { - description = "Lexmark E350d"; - deviceUri = "usb://Lexmark/E350d?serial=622Z9ZC"; - location = "office"; - name = "Lexmark_E350d"; - model = "drv:///sample.drv/generic.ppd"; - ppdOptions = { - job-sheets = "none, none"; - media = "na_letter_8.5x11in"; - sides = "one-sided"; - }; - } - ]; -}