diff options
author | Preston Pan <ret2pop@gmail.com> | 2025-02-03 15:35:10 -0800 |
---|---|---|
committer | Preston Pan <ret2pop@gmail.com> | 2025-02-03 15:35:10 -0800 |
commit | 8e5d3a8fcd6893bcd4903cc9b7bfe96f6486d7c6 (patch) | |
tree | 6881c472ddbabd6f3788066485f78fe5ddae0b4d /nix | |
parent | d6efefc1d9e6b9fd515c5cb5f2a077e05caeaab7 (diff) |
Add spontaneity system; add port to firewall
Diffstat (limited to 'nix')
-rw-r--r-- | nix/flake.nix | 11 | ||||
-rw-r--r-- | nix/modules/configuration.nix | 4 | ||||
-rw-r--r-- | nix/systems/spontaneity/default.nix | 11 |
3 files changed, 19 insertions, 7 deletions
diff --git a/nix/flake.nix b/nix/flake.nix index 058635a..50febed 100644 --- a/nix/flake.nix +++ b/nix/flake.nix @@ -75,7 +75,16 @@ spontaneity = nixpkgs.lib.nixosSystem { system = "x86_64-linux"; specialArgs = attrs; - modules = []; + modules = [ + lanzaboote.nixosModules.lanzaboote + disko.nixosModules.disko + home-manager.nixosModules.home-manager + sops-nix.nixosModules.sops + { nixpkgs.overlays = [ nur.overlays.default ]; } + { home-manager.extraSpecialArgs = attrs; } + ./modules/vda-simple.nix + ./systems/spontaneity/default.nix + ]; }; }; }; diff --git a/nix/modules/configuration.nix b/nix/modules/configuration.nix index 3c12962..97b8764 100644 --- a/nix/modules/configuration.nix +++ b/nix/modules/configuration.nix @@ -181,7 +181,7 @@ # wifi.macAddress = ""; }; firewall = { - allowedTCPPorts = [ 11434 ]; + allowedTCPPorts = [ 22 11434 ]; allowedUDPPorts = [ ]; }; }; @@ -292,7 +292,7 @@ users.users = { root.openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINSshvS1N/42pH9Unp3Zj4gjqs9BXoin99oaFWYHXZDJ preston@preston-arch" + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICts6+MQiMwpA+DfFQxjIN214Jn0pCw/2BDvOzPhR/H2 preston@continuity-dell" ]; git = { diff --git a/nix/systems/spontaneity/default.nix b/nix/systems/spontaneity/default.nix index f9146f8..89b3ce6 100644 --- a/nix/systems/spontaneity/default.nix +++ b/nix/systems/spontaneity/default.nix @@ -1,10 +1,13 @@ -{ ... }: +{ config, lib, ... }: { imports = [ ../../modules/default.nix ]; - monorepo = { - pipewire.enable = false; - home.enable = false; + config.monorepo = { + profiles = { + home.enable = false; + server.enable = true; + }; + vars.hostName = "spontaneity"; }; } |