pull ipaddrs from separate repo initial

This commit is contained in:
2025-04-19 20:31:26 -05:00
parent b4825fec4f
commit e0c87891ce
5 changed files with 28 additions and 20 deletions
+21 -16
View File
@@ -1,9 +1,6 @@
{ config, lib, pkgs, meta, ... }: { config, lib, pkgs, meta, ipAddrs, ... }:
{
let
addresses = import (toString ./ip-addresses.nix);
in {
imports = [ ]; imports = [ ];
nix.settings.experimental-features = [ "nix-command" "flakes" ]; nix.settings.experimental-features = [ "nix-command" "flakes" ];
@@ -40,11 +37,22 @@ in {
networking.interfaces.eth0.ipv4.addresses = [ networking.interfaces.eth0.ipv4.addresses = [
{ {
address = addresses.${meta.hostname}; address = ipAddrs.${meta.hostname};
prefixLength = 24; prefixLength = 24;
} }
]; ];
networking.defaultGateway = "192.168.1.1";
networking.nameservers = [ "1.1.1.1" "1.0.0.1" ];
# Open ports in the firewall.
# networking.firewall.allowedTCPPorts = [ ... ];
# networking.firewall.allowedUDPPorts = [ ... ];
networking.firewall = {
enable = true;
allowedTCPPorts = [ 22 80 443 ];
};
# Set your time zone. # Set your time zone.
time.timeZone = "America/Chicago"; time.timeZone = "America/Chicago";
@@ -89,6 +97,13 @@ in {
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICNkZ5Xr75thR/tEgsASzYAtaA/kbsv2PKI8ux9rgpTe roydumblauskas@gmail.com" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICNkZ5Xr75thR/tEgsASzYAtaA/kbsv2PKI8ux9rgpTe roydumblauskas@gmail.com"
]; ];
}; };
users.users.root = {
hashedPassword = "$y$j9T$IjaP0KIfdpEvlLtOn.u0T/$0MJDaFEdSu6zSJ04CF1dtorD6IVgbN3vmDiiwGwwqr5";
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICNkZ5Xr75thR/tEgsASzYAtaA/kbsv2PKI8ux9rgpTe roydumblauskas@gmail.com"
];
};
# List packages installed in system profile. To search, run: # List packages installed in system profile. To search, run:
# $ nix search wget # $ nix search wget
@@ -111,16 +126,6 @@ in {
# Enable the OpenSSH daemon. # Enable the OpenSSH daemon.
services.openssh.enable = true; services.openssh.enable = true;
# Open ports in the firewall.
# networking.firewall.allowedTCPPorts = [ ... ];
# networking.firewall.allowedUDPPorts = [ ... ];
# Or disable the firewall altogether.
# networking.firewall.enable = false;
networking.firewall = {
enable = true;
allowedTCPPorts = [ 22 80 443 ];
};
# Copy the NixOS configuration file and link it from the resulting system # Copy the NixOS configuration file and link it from the resulting system
# (/run/current-system/configuration.nix). This is useful in case you # (/run/current-system/configuration.nix). This is useful in case you
# accidentally delete configuration.nix. # accidentally delete configuration.nix.
+5
View File
@@ -16,6 +16,10 @@
url = "github:Mic92/sops-nix"; url = "github:Mic92/sops-nix";
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";
}; };
quasiSecrets = {
url = "git+ssh://git@github.com/RoyDumblauskas/server-semi-secrets";
inputs.nixpkgs.follows = "nixpkgs";
};
}; };
outputs = { self, nixpkgs, nixvim, home-manager, disko, sops-nix }@inputs: outputs = { self, nixpkgs, nixvim, home-manager, disko, sops-nix }@inputs:
@@ -37,6 +41,7 @@
./disk-config.nix ./disk-config.nix
disko.nixosModules.disko disko.nixosModules.disko
sops-nix.nixosModules.sops sops-nix.nixosModules.sops
quasiSecrets.nixosModules.ipAddrs
home-manager.nixosModules.home-manager { home-manager.nixosModules.home-manager {
home-manager.useGlobalPkgs = true; home-manager.useGlobalPkgs = true;
home-manager.useUserPackages = true; home-manager.useUserPackages = true;
+1 -1
View File
@@ -8,7 +8,7 @@
[ (modulesPath + "/installer/scan/not-detected.nix") [ (modulesPath + "/installer/scan/not-detected.nix")
]; ];
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "ehci_pci" "nvme" "usbhid" "usb_storage" "sd_mod" "sr_mod" ]; boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "ehci_pci" "nvme" "sr_mod" ];
boot.initrd.kernelModules = [ ]; boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-amd" ]; boot.kernelModules = [ "kvm-amd" ];
boot.extraModulePackages = [ ]; boot.extraModulePackages = [ ];
+1
View File
@@ -8,6 +8,7 @@
home.packages = with pkgs; [ home.packages = with pkgs; [
git git
tree tree
unixtools.ping
]; ];
home.stateVersion = "24.11"; home.stateVersion = "24.11";
-3
View File
@@ -1,3 +0,0 @@
{
hostName = "000.000.0.000";
}