liv/nixos-config
1
0
Fork 0
mirror of https://github.com/Ahwxorg/nixos-config.git synced 2025-12-05 07:05:40 +01:00
Code Issues 1 Projects Releases Packages Wiki Activity Actions

Compare commits

base: liv:274232c66b7cf3ed3205edc0e2b26cde2fb7edd6
Branches Tags
liv:master
..
compare: liv:17acf4b2d8527e204e9ca567d63051503622e0da
Branches Tags
liv:master

7 commits
274232c66b ... 17acf4b2d8

Author SHA1 Message Date
Ahwx
17acf4b2d8 feat: adds else if for dandelion 2025-08-01 10:24:49 +02:00
Ahwx
5cfbf7437d feat: adds secrets.yaml file for dandelion 2025-08-01 10:21:03 +02:00
Ahwx
7e88abdfc1 chore: set avahi.enable to lib.mkForce true as it is being disabled by default for all networking-enabled machines 2025-08-01 10:20:46 +02:00
Ahwx
1d735c345a fix: set avahi.enable to lib.mkDefault false instead of false so that individual hosts can override this 2025-08-01 10:19:50 +02:00
Ahwx
3c265f96fd chore: adds dandelion to sops file 2025-08-01 10:14:09 +02:00
Ahwx
d07c741747 chore: adds winbox 2025-08-01 10:13:54 +02:00
Ahwx
87d35346c5 chore: partition disk sda with mbr so that grub wont be mad 2025-08-01 10:13:42 +02:00
7 changed files with 41 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

6
.sops.yaml
View file

@ -1,6 +1,7 @@
keys: keys:
- &sakura age1yzapmznelujajfyrpw5mxmy86ckg377494w5ap4yej39jatewursfxls9w - &sakura age1yzapmznelujajfyrpw5mxmy86ckg377494w5ap4yej39jatewursfxls9w
- &violet age1zegau3chyn53tqvkwud6tuyggpkazc88pdkqv8cknavaudu49enqm2f0h3 - &violet age1zegau3chyn53tqvkwud6tuyggpkazc88pdkqv8cknavaudu49enqm2f0h3
- &dandelion age1dpzajxcx7dcumda55qc3hncxqd43a7k85t2cdwtcvy5qsgp6k5tsugxqmd
creation_rules: creation_rules:
- path_regex: secrets/secrets.yaml - path_regex: secrets/secrets.yaml
key_groups: key_groups:
@ -11,3 +12,8 @@ creation_rules:
- age: - age:
- *sakura - *sakura
- *violet - *violet
- path_regex: secrets/dandelion/secrets.yaml
key_groups:
- age:
- *sakura
- *dandelion

4
hosts/hazel/disko.nix
View file

@ -5,11 +5,11 @@
]; ];
disko.devices = { disko.devices = {
disk = { disk = {
my-disk = { sda = {
device = "/dev/sda"; device = "/dev/sda";
type = "disk"; type = "disk";
content = { content = {
type = "gpt"; type = "mbr";
partitions = { partitions = {
ESP = { ESP = {
type = "EF00"; type = "EF00";

4
modules/core/network.nix
View file

@ -1,4 +1,4 @@
{ pkgs, ... }: { pkgs, lib, ... }:
{ {
networking = { networking = {
networkmanager = { networkmanager = {
@ -11,6 +11,6 @@
}; };
}; };
services = { services = {
avahi.enable = false; avahi.enable = lib.mkDefault false;
}; };
} }

4
modules/core/sops.nix
View file

@ -26,6 +26,10 @@
{ {
"systemMailerPassword" = { }; "systemMailerPassword" = { };
} }
else if (host == "dandelion") then
{
"systemMailerPassword" = { };
}
else else
{ }; { };
}; };

1
modules/home/packages.nix
View file

@ -28,6 +28,7 @@ let
lxqt.pavucontrol-qt lxqt.pavucontrol-qt
mpv mpv
plasma5Packages.kdeconnect-kde plasma5Packages.kdeconnect-kde
winbox
# onthespot-overlay # onthespot-overlay
# Gaming # Gaming

2
modules/services/nfs.nix
View file

@ -26,7 +26,7 @@
# ^^ Needed to allow samba to automatically register mDNS records (without the need for an `extraServiceFile` # ^^ Needed to allow samba to automatically register mDNS records (without the need for an `extraServiceFile`
#nssmdns4 = true; #nssmdns4 = true;
# ^^ Not one hundred percent sure if this is needed- if it aint broke, don't fix it # ^^ Not one hundred percent sure if this is needed- if it aint broke, don't fix it
enable = true; enable = lib.mkForce true;
openFirewall = true; openFirewall = true;
}; };
samba-wsdd = { samba-wsdd = {

25
secrets/dandelion/secrets.yaml Normal file
View file

@ -0,0 +1,25 @@
systemMailerPassword: ENC[AES256_GCM,data:b9Mmxo3beDpo1pi1Y+5TZn64ZeKJzJXlJwYFs5BjVMngeej+Y0naWmwBdlTEwzPm6OiO/N1haNQUlwT4KdOTx7t8PsZwQ5dOQl1gjWp0T+0ImWLImvINyvDIg6uh9RsvqLIJBvgLAtiUHE3jq7vLwDPaZ69tvjmGACNfNKX8A0A=,iv:BvmZ7GtDsHFWSY+cL10P1e7I75ZwrzjFJ6e5J2IbEic=,tag:g9yqAQtJ9kD3o1cfng0gTA==,type:str]
sops:
age:
- recipient: age1yzapmznelujajfyrpw5mxmy86ckg377494w5ap4yej39jatewursfxls9w
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIcHFGUFltcUVSNnJXNWhI
TU5ySU1SQXVYdUFNOUlXdmZzYTZnZFhWQVJnCmV6T1duSnlGejNMc1hDUHovYTJE
Ri93OURqaEVrd0xCRUZZdWhsKzI1QkEKLS0tIExDeE9BNUxoYjhzWjBrM1FIUzV1
cGpiNmJ6blQ2c1FiOEFnNllrbWxjWmsKDXsXc2tlmgXHmEveCVq1WMrFRtzLttgc
0sMlwMFo71eV5JWrDjPbg0WwXonGI9TILJ09FFSTK7FRhwyFpgL6TA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1dpzajxcx7dcumda55qc3hncxqd43a7k85t2cdwtcvy5qsgp6k5tsugxqmd
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxS250MmZyazRFVGMzdzVy
T09EaE1lY1h1d3BiMFRlNWV2SXNXNFBuekRnClRieVJrbGFMRjdCZEFVUjdoa2JQ
K1RzalZBVThOMWl3T2pZakxUTUI5cXcKLS0tIHBPeVdtUmtCUmtOTVVRZlNwUXpO
L1d2bW5tRDhjQ2VaU0xDWWlZYi94TEUKvjD1Pk8/Jq18nCJioeVBYbfaT3rSYr4l
aZ+j21bb7tE3JbUQfGkYo2blJqZsxFxblZlvf6tK2DU39Tl64naUpQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-08-01T08:17:35Z"
mac: ENC[AES256_GCM,data:WrMLYUSjwh0MOPPAjGTzLip5I+4LxrQoSreKANsl6xwakMmDKzENgp3kzsZyAqWaX6OgLWh1YrpnN+9z6n3UDi+LGYj1WZwHeZnBCwnuyq9cyAhLdPxcvqp0bcNaZfI04IUPpMTk/8o14gpTsbCYy+eIUc/19golYN2NKr2B03Y=,iv:Np1OeYCWdnun3QlQ8MAPd2TRMFwdx1l3Ca0JffqCv64=,tag:jTLzww9TKQnmkla2PhCR1Q==,type:str]
unencrypted_suffix: _unencrypted
version: 3.10.2