From e65d1b28ac2fb1199d08324e771d5fd9cc6b12c9 Mon Sep 17 00:00:00 2001 From: Rob Date: Tue, 16 Jan 2024 19:34:43 +0000 Subject: [PATCH] setup vanilla nixos --- configuration.nix | 126 +++++++++++++++++++++++++++++++++++++ hardware-configuration.nix | 32 ++++++++++ modules/result | 1 + modules/root-programs.nix | 14 +++++ modules/storage.nix | 43 +++++++++++++ modules/storage.nix.save | 43 +++++++++++++ modules/users.nix | 17 +++++ 7 files changed, 276 insertions(+) create mode 100644 configuration.nix create mode 100644 hardware-configuration.nix create mode 120000 modules/result create mode 100644 modules/root-programs.nix create mode 100644 modules/storage.nix create mode 100644 modules/storage.nix.save create mode 100644 modules/users.nix diff --git a/configuration.nix b/configuration.nix new file mode 100644 index 0000000..8a7df7c --- /dev/null +++ b/configuration.nix @@ -0,0 +1,126 @@ +# Edit this configuration file to define what should be installed on +# your system. Help is available in the configuration.nix(5) man page, on +# https://search.nixos.org/options and in the NixOS manual (`nixos-help`). + +{ config, lib, pkgs, ... }: + +{ + console.keyMap = "de"; + + imports = + [ # Include the results of the hardware scan. + ./hardware-configuration.nix + + # meine module + ./modules/users.nix + ./modules/storage.nix + ./modules/root-programs.nix + ]; + + # Use the GRUB 2 boot loader. + boot.loader.grub.enable = true; + # boot.loader.grub.efiSupport = true; + # boot.loader.grub.efiInstallAsRemovable = true; + # boot.loader.efi.efiSysMountPoint = "/boot/efi"; + # Define on which hard drive you want to install Grub. + # boot.loader.grub.device = "/dev/disk/by-label/nixos"; #"/dev/sda"; # or "nodev" for efi only + boot.loader.grub.device = "/dev/disk/by-id/ata-TOSHIBA_MK5061GSY_3273P0RAT"; + + + + networking.hostName = "bfds"; # Define your hostname. + # Pick only one of the below networking options. + # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. + # networking.networkmanager.enable = true; # Easiest to use and most distros use this by default. + + # Set your time zone. + # time.timeZone = "Europe/Berlin"; + + # Configure network proxy if necessary + # networking.proxy.default = "http://user:password@proxy:port/"; + # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; + + # Select internationalisation properties. + # i18n.defaultLocale = "en_US.UTF-8"; + # console = { + # font = "Lat2-Terminus16"; + # keyMap = "us"; + # useXkbConfig = true; # use xkb.options in tty. + # }; + + # Enable the X11 windowing system. + # services.xserver.enable = true; + + # Configure keymap in X11 + # services.xserver.xkb.layout = "us"; + # services.xserver.xkb.options = "eurosign:e,caps:escape"; + + # Enable CUPS to print documents. + # services.printing.enable = true; + + # Enable sound. + # sound.enable = true; + # hardware.pulseaudio.enable = true; + + # Enable touchpad support (enabled default in most desktopManager). + # services.xserver.libinput.enable = true; + + # Define a user account. Don't forget to set a password with ‘passwd’. + # users.users.alice = { + # isNormalUser = true; + # extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user. + # packages = with pkgs; [ + # firefox + # tree + # ]; + # }; + + # List packages installed in system profile. To search, run: + # $ nix search wget + # environment.systemPackages = with pkgs; [ + # vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default. + # wget + # ]; + + # Some programs need SUID wrappers, can be configured further or are + # started in user sessions. + # programs.mtr.enable = true; + # programs.gnupg.agent = { + # enable = true; + # enableSSHSupport = true; + # }; + + # List services that you want to enable: + + # Enable the OpenSSH daemon. + services.openssh.enable = true; + + # Open ports in the firewall. + # networking.firewall.allowedTCPPorts = [ ... ]; + # networking.firewall.allowedUDPPorts = [ ... ]; + # Or disable the firewall altogether. + # networking.firewall.enable = false; + + # Copy the NixOS configuration file and link it from the resulting system + # (/run/current-system/configuration.nix). This is useful in case you + # accidentally delete configuration.nix. + # system.copySystemConfiguration = true; + + # This option defines the first version of NixOS you have installed on this particular machine, + # and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions. + # + # Most users should NEVER change this value after the initial install, for any reason, + # even if you've upgraded your system to a new NixOS release. + # + # This value does NOT affect the Nixpkgs version your packages and OS are pulled from, + # so changing it will NOT upgrade your system. + # + # This value being lower than the current NixOS release does NOT mean your system is + # out of date, out of support, or vulnerable. + # + # Do NOT change this value unless you have manually inspected all the changes it would make to your configuration, + # and migrated your data accordingly. + # + # For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion . + system.stateVersion = "23.11"; # Did you read the comment? +} diff --git a/hardware-configuration.nix b/hardware-configuration.nix new file mode 100644 index 0000000..f348e97 --- /dev/null +++ b/hardware-configuration.nix @@ -0,0 +1,32 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ config, lib, pkgs, modulesPath, ... }: + +{ + imports = + [ (modulesPath + "/installer/scan/not-detected.nix") + ]; + + boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "sd_mod" ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ "kvm-intel" ]; + boot.extraModulePackages = [ ]; + + fileSystems."/" = + { device = "/dev/disk/by-uuid/9d2ea5b8-cc81-436d-8595-73df4109e49b"; + fsType = "ext4"; + }; + + swapDevices = [ ]; + + # Enables DHCP on each ethernet and wireless interface. In case of scripted networking + # (the default) this is the recommended approach. When using systemd-networkd it's + # still possible to use this option, but it's recommended to use it in conjunction + # with explicit per-interface declarations with `networking.interfaces..useDHCP`. + networking.useDHCP = lib.mkDefault true; + # networking.interfaces.enp2s0.useDHCP = lib.mkDefault true; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; + hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; +} diff --git a/modules/result b/modules/result new file mode 120000 index 0000000..414001c --- /dev/null +++ b/modules/result @@ -0,0 +1 @@ +/nix/store/f63q5ak4m5rxgway2sz1n7f1kgbcpgq7-nixos-system-bfds-23.11.2217.d02d818f22c7 \ No newline at end of file diff --git a/modules/root-programs.nix b/modules/root-programs.nix new file mode 100644 index 0000000..ee67694 --- /dev/null +++ b/modules/root-programs.nix @@ -0,0 +1,14 @@ +{ pkgs, ... }: +{ + # List packages installed in system profile. To search, run: + # $ nix search wget + environment.systemPackages = with pkgs; [ + wget + nano + git + mc + ncdu + parted + gpart + ]; +} diff --git a/modules/storage.nix b/modules/storage.nix new file mode 100644 index 0000000..2e20d19 --- /dev/null +++ b/modules/storage.nix @@ -0,0 +1,43 @@ +{ config, ... }: +{ + systemd.services.zfs-mount.enable = false; + + networking.hostId = "07019099"; + boot.supportedFilesystems = [ "zfs" ]; + boot.zfs.devNodes = "/dev/disk/by-id/ata-WDC_WD30EZRZ-00Z5HB0_WD-WCC4N7LL2J1S-part1"; #oder mit -part1 am ende + + fileSystems."/bfds-nix" = + { device = "bfds-nix"; + fsType = "zfs"; + }; + + fileSystems."/bfds-nix/music" = + { device = "bfds-nix/music"; + fsType = "zfs"; + }; + + fileSystems."/bfds-nix/rob" = + { device = "bfds-nix/rob"; + fsType = "zfs"; + }; + + fileSystems."/bfds-nix/hoerbuecher" = + { device = "bfds-nix/hoerbuecher"; + fsType = "zfs"; + }; + + fileSystems."/bfds-nix/movies" = + { device = "bfds-nix/movies"; + fsType = "zfs"; + }; + + fileSystems."/bfds-nix/peggy" = + { device = "bfds-nix/peggy"; + fsType = "zfs"; + }; + + fileSystems."/bfds-nix/ebooks" = + { device = "bfds-nix/ebooks"; + fsType = "zfs"; + }; +} diff --git a/modules/storage.nix.save b/modules/storage.nix.save new file mode 100644 index 0000000..c0cd057 --- /dev/null +++ b/modules/storage.nix.save @@ -0,0 +1,43 @@ +{ config, ... }: +{ + systemd.services.zfs-mount.enable = false; + + networking.hostId = "07019099"; + boot.supportedFilesystems = [ "zfs" ]; + boot.zfs.devNodes = "/dev/disk/by-id/ata-WDC_WD30EZRZ-00Z5HB0_WD-WCC4N7LL2J1S-part1"; #oder mit -part1 am ende + + #fileSystems."/bfds-nix" = + # { device = "bfds-nix"; + # fsType = "zfs"; + # }; + + fileSystems."/bfds-nix/music" = + { device = "bfds-nix/music"; + fsType = "zfs"; + }; + + fileSystems."/bfds-nix/rob" = + { device = "bfds-nix/rob"; + fsType = "zfs"; + }; + + fileSystems."/bfds-nix/hoerbuecher" = + { device = "bfds-nix/hoerbuecher"; + fsType = "zfs"; + }; + + fileSystems."/bfds-nix/movies" = + { device = "bfds-nix/movies"; + fsType = "zfs"; + }; + + fileSystems."/bfds-nix/peggy" = + { device = "bfds-nix/peggy"; + fsType = "zfs"; + }; + + fileSystems."/bfds-nix/ebooks" = + { device = "bfds-nix/ebooks"; + fsType = "zfs"; + }; +} diff --git a/modules/users.nix b/modules/users.nix new file mode 100644 index 0000000..97b7afb --- /dev/null +++ b/modules/users.nix @@ -0,0 +1,17 @@ +{ config, ... }: +let + keys = [ + "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHSacquswkrT7FzoWEHnc7+cyMbHJ9mMHXozMD17q5N6RplJ1jm1xsiKOXqgO+klEwQMdE3Zr41yfqmdr+9+nd4=" + ]; +in +{ + users.users = { + sshuser = { + isNormalUser = true; + home = "/home/sshuser"; + description = "Fuer den Zugriff per SSH"; + extraGroups = [ "wheel" "users" "dialout" "network" "system-network" "input" "rsync" ]; + openssh.authorizedKeys.keys = keys; + }; + }; +}