add lumiose

2026-04-26 01:16:10 -05:00
parent 9b4d196371
commit 594132d038
3 changed files with 171 additions and 0 deletions
@@ -0,0 +1,93 @@
+{ config, lib, inputs, stable_pkgs, unstable_pkgs, ... }:
+
+let
+  pkgs = stable_pkgs.x86_64;
+  unstable = unstable_pkgs.x86_64;
+in
+{
+  imports =
+    [ # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+      ../../nixos
+      ../../../users/blake
+      ../../../modules/system
+      #../../../modules/holocron
+      #../../../modules/homelab
+      #../../../modules/gameservers/minecraft_recpro
+      #../../../modules/gameservers/minecraft_modded
+    ];
+
+  home-manager.users.blake.imports = [
+  ../../../users/blake/hosts/lumiose.nix
+  ];
+
+  system = {
+    ssh.enable = true;
+    sops.enable = true;
+    podman.enable = true;
+    yubikey.enable = true;
+    graphics = {
+      enable = true;
+      vendor = "amd";
+    };
+  };
+
+  # boot (systemd is going on me)
+  boot.loader.systemd-boot.enable = true;   # systemd your pretty cool ya know
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.initrd.systemd.enable = true;  # better logging
+
+  # setup hostname and networking stack
+  services.resolved = {
+    enable = true;
+    fallbackDns = [ "1.1.1.1" "9.9.9.9" ];
+    dnsovertls = "opportunistic";
+  };
+  networking = {
+    hostName = "lumiose"; # hostname
+    #hostId = "";    # zfs wants this
+    networkmanager = {
+      enable = true;  # the goat
+      dns = "systemd-resolved"; # the backup dancer!
+      ensureProfiles.profiles = {
+        vpn = {
+          ethernet.mac-address = "7a:e4:07:8d:22:76";
+          connection.type = "vlan";
+          connection.id = "vpn";
+          connection.interface-name = "enp89s0.69";   # or just "vpn-vlan"
+          vlan.interface-name = "enp89s0.69";   # or just "vpn-vlan"
+          vlan.parent = "enp89s0";
+          vlan.id = 69;
+          #ipv4.dns = "9.9.9.9";
+        };
+      };
+    };
+  };
+
+  
+
+  hardware.bluetooth.enable = true;
+
+
+
+  # Open ports in the firewall.
+  networking.firewall.allowedTCPPorts = [
+    80      # set - http
+    111     # set - portmapper for nfs
+    139     # set - smb
+    443     # set - https
+    445     # set - cifs
+    1198
+    1883    # set - mqtt
+    2049    # set - nfs
+    2222    # srv - syncthing
+  ];
+
+  networking.firewall.allowedUDPPorts = [ 51820 ];
+  # Or disable the firewall altogether.
+  networking.firewall.enable = true;
+
+  system.stateVersion = "25.05"; # stays here :   )
+
+}
+
@@ -0,0 +1,70 @@
+{
+  disko.devices = {
+    disk = {
+      main = {
+        type = "disk";
+        device = "/dev/disk/by-id/teehee"; # disk id here
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "umask=0077" ];
+              };
+            };
+            luks = {
+              size = "100%";
+              content = {
+                type = "luks";
+                name = "crypted";
+                # disable settings.keyFile if you want to use interactive password entry
+                #passwordFile = "/tmp/secret.key"; # Interactive
+                settings = {
+                  allowDiscards = true;
+                  #keyFile = "/tmp/secret.key";
+                };
+                #additionalKeyFiles = [ "/tmp/additionalSecret.key" ];
+                content = {
+                  type = "btrfs";
+                  extraArgs = [ "-f" ];
+                  subvolumes = {
+                    "@root" = {
+                      mountpoint = "/";
+                      mountOptions = [
+                        "compress=zstd"
+                        "noatime"
+                      ];
+                    };
+                    "@home" = {
+                      mountpoint = "/home";
+                      mountOptions = [
+                        "compress=zstd"
+                        "noatime"
+                      ];
+                    };
+                    "@nix" = {
+                      mountpoint = "/nix";
+                      mountOptions = [
+                        "compress=zstd"
+                        "noatime"
+                      ];
+                    };
+                    "@swap" = {
+                      mountpoint = "/.swapvol";
+                      swap.swapfile.size = "32G";
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+}