dotfiles/hosts/swan/default.nix

105 lines
3.1 KiB
Nix
Raw Normal View History

2023-02-18 15:24:54 +00:00
# The Swan
# System configuration for my home NAS server
{ inputs, globals, overlays, ... }:
inputs.nixpkgs.lib.nixosSystem {
2023-02-18 15:24:54 +00:00
system = "x86_64-linux";
specialArgs = { };
modules = [
2023-03-20 03:36:15 +00:00
globals
inputs.home-manager.nixosModules.home-manager
inputs.disko.nixosModules.disko
../../modules/common
../../modules/nixos
2023-02-18 15:24:54 +00:00
{
2023-08-05 21:14:26 +00:00
nixpkgs.overlays = overlays;
2023-07-01 21:33:24 +00:00
# Hardware
2023-02-18 15:24:54 +00:00
server = true;
physical = true;
2023-02-27 02:50:24 +00:00
networking.hostName = "swan";
2023-08-05 21:14:26 +00:00
# Not sure what's necessary but too afraid to remove anything
boot.initrd.availableKernelModules =
[ "xhci_pci" "ahci" "nvme" "usb_storage" "sd_mod" ];
2023-07-01 21:33:24 +00:00
# Required for transcoding
boot.initrd.kernelModules = [ "amdgpu" ];
boot.kernelParams = [
"radeon.si_support=0"
"amdgpu.si_support=1"
"radeon.cik_support=0"
"amdgpu.cik_support=1"
"amdgpu.dc=1"
];
2023-08-05 21:14:26 +00:00
# Required binary blobs to boot on this machine
hardware.enableRedistributableFirmware = true;
2023-07-01 21:33:24 +00:00
2023-08-05 21:14:26 +00:00
# Prioritize efficiency over performance
powerManagement.cpuFreqGovernor = "powersave";
2023-08-05 21:14:26 +00:00
# Allow firmware updates
hardware.cpu.intel.updateMicrocode = true;
2023-02-26 13:23:31 +00:00
# ZFS
2023-02-27 02:50:24 +00:00
zfs.enable = true;
2023-07-01 21:33:24 +00:00
# Generated with: head -c 8 /etc/machine-id
networking.hostId = "600279f4"; # Random ID required for ZFS
2023-08-05 21:14:26 +00:00
# Sets root ext4 filesystem instead of declaring it manually
disko = {
enableConfig = true;
2023-02-27 01:49:46 +00:00
devices = (import ../../disks/root.nix { disk = "/dev/nvme0n1"; });
};
2023-08-05 21:14:26 +00:00
# Automatically load the ZFS pool on boot
2023-02-27 02:50:24 +00:00
boot.zfs.extraPools = [ "tank" ];
2023-02-26 13:23:31 +00:00
2023-08-05 21:14:26 +00:00
# Theming
# Server doesn't require GUI
2023-02-18 15:24:54 +00:00
gui.enable = false;
2023-08-05 21:14:26 +00:00
# Still require colors for programs like Neovim, K9S
2023-02-18 15:24:54 +00:00
theme = { colors = (import ../../colorscheme/gruvbox).dark; };
2023-08-05 21:14:26 +00:00
# Programs and services
2023-02-27 02:50:24 +00:00
neovim.enable = true;
cloudflare.enable = true;
2023-07-01 21:33:24 +00:00
dotfiles.enable = true;
arrs.enable = true;
2023-07-18 03:52:37 +00:00
services.bind.enable = true;
services.caddy.enable = true;
services.jellyfin.enable = true;
services.nextcloud.enable = true;
services.calibre-web.enable = true;
services.openssh.enable = true;
2023-07-16 13:50:58 +00:00
services.prometheus.enable = false;
services.vmagent.enable = true;
services.samba.enable = true;
2023-02-18 15:24:54 +00:00
2023-08-05 21:14:26 +00:00
# Allows private remote access over the internet
2023-06-19 12:30:30 +00:00
cloudflareTunnel = {
enable = true;
id = "646754ac-2149-4a58-b51a-e1d0a1f3ade2";
credentialsFile = ../../private/cloudflared-swan.age;
ca =
"ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCHF/UMtJqPFrf6f6GRY0ZFnkCW7b6sYgUTjTtNfRj1RdmNic1NoJZql7y6BrqQinZvy7nsr1UFDNWoHn6ah3tg= open-ssh-ca@cloudflareaccess.org";
};
2023-08-05 21:14:26 +00:00
# Send regular backups and litestream for DBs to an S3-like bucket
2023-02-28 02:02:45 +00:00
backup.s3 = {
endpoint = "s3.us-west-002.backblazeb2.com";
bucket = "noahmasur-backup";
accessKeyId = "0026b0e73b2e2c80000000005";
};
2023-02-18 15:24:54 +00:00
# Disable passwords, only use SSH key
publicKey =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB+AbmjGEwITk5CK9y7+Rg27Fokgj9QEjgc9wST6MA3s";
}
];
}