52 lines
982 B
Nix
52 lines
982 B
Nix
{
|
|
meta,
|
|
pkgs,
|
|
...
|
|
}: {
|
|
imports = [../../common/users.nix ../../common/zerotier.nix ../../common/k3s.nix];
|
|
nix = {
|
|
settings.experimental-features = ["nix-command" "flakes"];
|
|
};
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
networking.hostName = meta.hostname;
|
|
|
|
age.secrets.k3s.file = ../../secrets/k3s.age;
|
|
|
|
boot.loader.systemd-boot.enable = true;
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
boot.tmp.cleanOnBoot = true;
|
|
|
|
services.openssh.enable = true;
|
|
services.qemuGuest.enable = true;
|
|
|
|
# For longhorn
|
|
services.openiscsi = {
|
|
enable = true;
|
|
name = "iqn.2016-04.com.open-iscsi:${meta.hostname}";
|
|
};
|
|
systemd.tmpfiles.rules = [
|
|
"L+ /usr/local/bin - - - - /run/current-system/sw/bin/"
|
|
];
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
git
|
|
neovim
|
|
wget
|
|
jq
|
|
ripgrep
|
|
fd
|
|
nfs-utils
|
|
];
|
|
|
|
networking = {
|
|
firewall = {
|
|
enable = true;
|
|
allowedTCPPorts = [22];
|
|
};
|
|
};
|
|
|
|
system.stateVersion = "24.11";
|
|
}
|