From 8e5d3a8fcd6893bcd4903cc9b7bfe96f6486d7c6 Mon Sep 17 00:00:00 2001 From: Preston Pan Date: Mon, 3 Feb 2025 15:35:10 -0800 Subject: Add spontaneity system; add port to firewall --- nix/flake.nix | 11 ++++++++++- nix/modules/configuration.nix | 4 ++-- nix/systems/spontaneity/default.nix | 11 +++++++---- 3 files changed, 19 insertions(+), 7 deletions(-) (limited to 'nix') diff --git a/nix/flake.nix b/nix/flake.nix index 058635a..50febed 100644 --- a/nix/flake.nix +++ b/nix/flake.nix @@ -75,7 +75,16 @@ spontaneity = nixpkgs.lib.nixosSystem { system = "x86_64-linux"; specialArgs = attrs; - modules = []; + modules = [ + lanzaboote.nixosModules.lanzaboote + disko.nixosModules.disko + home-manager.nixosModules.home-manager + sops-nix.nixosModules.sops + { nixpkgs.overlays = [ nur.overlays.default ]; } + { home-manager.extraSpecialArgs = attrs; } + ./modules/vda-simple.nix + ./systems/spontaneity/default.nix + ]; }; }; }; diff --git a/nix/modules/configuration.nix b/nix/modules/configuration.nix index 3c12962..97b8764 100644 --- a/nix/modules/configuration.nix +++ b/nix/modules/configuration.nix @@ -181,7 +181,7 @@ # wifi.macAddress = ""; }; firewall = { - allowedTCPPorts = [ 11434 ]; + allowedTCPPorts = [ 22 11434 ]; allowedUDPPorts = [ ]; }; }; @@ -292,7 +292,7 @@ users.users = { root.openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINSshvS1N/42pH9Unp3Zj4gjqs9BXoin99oaFWYHXZDJ preston@preston-arch" + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICts6+MQiMwpA+DfFQxjIN214Jn0pCw/2BDvOzPhR/H2 preston@continuity-dell" ]; git = { diff --git a/nix/systems/spontaneity/default.nix b/nix/systems/spontaneity/default.nix index f9146f8..89b3ce6 100644 --- a/nix/systems/spontaneity/default.nix +++ b/nix/systems/spontaneity/default.nix @@ -1,10 +1,13 @@ -{ ... }: +{ config, lib, ... }: { imports = [ ../../modules/default.nix ]; - monorepo = { - pipewire.enable = false; - home.enable = false; + config.monorepo = { + profiles = { + home.enable = false; + server.enable = true; + }; + vars.hostName = "spontaneity"; }; } -- cgit