basic pi stuff, ugly but functional

systems/aarch64-linux/pi4/disko.nix

@@ -0,0 +1,102 @@
+{ config, lib, ... }:
+let
+  rootDisk = "/dev/sda1";
+in
+{
+  disko.devices = {
+    nodev."/" = {
+      fsType = "tmpfs";
+      mountOptions = [
+        "mode=755"
+        "defaults"
+        "size=2G"
+      ];
+    };
+    # root disk setup
+    disk.main = {
+      type = "disk";
+      device = rootDisk;
+      imageSize = "15G";
+      content = {
+        type = "gpt";
+        # specify partitions
+        partitions = {
+          # /boot/firmware
+          FIRMWARE = {
+            priority = 1;
+            name = "FIRMWARE";
+            start = "1M";
+            end = "1G";
+            type = "0700";
+            content = {
+              type = "filesystem";
+              format = "vfat";
+              mountpoint = "/boot/firmware";
+              mountOptions = [ "umask=0077" ];
+            };
+          };
+          # /boot
+          ESP = {
+            priority = 2;
+            name = "ESP";
+            # start = "1G";
+            # end = "2G";
+            size = "1G";
+            type = "EF00";
+            content = {
+              type = "filesystem";
+              format = "vfat";
+              mountpoint = "/boot";
+              mountOptions = [ "umask=0077" ];
+            };
+          };
+
+          root = {
+            name = "btrfs-root";
+            size = "100%";
+            content = {
+              type = "btrfs";
+              extraArgs = [ "-f" ]; # Override existing partition
+              # Subvolumes must set a mountpoint in order to be mounted,
+              # unless their parent is mounted
+              subvolumes = {
+                "home" = {
+                  mountOptions = [ "compress=zstd" ];
+                  mountpoint = "/home";
+                };
+                "root" = {
+                  mountOptions = [
+                    "compress=zstd"
+                    "noatime"
+                  ];
+                  mountpoint = "/root";
+                };
+                "nix" = {
+                  mountOptions = [
+                    "compress=zstd"
+                    "noatime"
+                  ];
+                  mountpoint = "/nix";
+                };
+                "etc" = {
+                  mountOptions = [
+                    "compress=zstd"
+                    "noatime"
+                  ];
+                  mountpoint = "/etc";
+                };
+                "log" = {
+                  mountOptions = [
+                    "compress=zstd"
+                    "noatime"
+                  ];
+                  mountpoint = "/var/log";
+                };
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+}

systems/aarch64-linux/pi4/sops.nix

@@ -4,7 +4,7 @@ let
 in
 {
   sops = {
-    defaultSopsFile = ../../secrets/pi4-secrets.yaml;
+    defaultSopsFile = ../../../secrets/pi4-secrets.yaml;
 #    age = {
 #      generateKey = true;
 #      sshKeyPaths = [ "/etc/ssd/ssh_host_ed25519_key" ];
@@ -16,7 +16,7 @@ in
     # ------------------------------
     secrets = {
       "wifi" = {
-        sopsFile = ../../secrets/secrets.yaml;
+        sopsFile = ../../../secrets/secrets.yaml;
       };
       "pi4/matt-password" = {
         neededForUsers = true;
@@ -30,21 +30,21 @@ in
       # ------------------------------
 
       "ssh-keys-public/pi4" = {
-        sopsFile = ../../secrets/secrets.yaml;
+        sopsFile = ../../../secrets/secrets.yaml;
         mode = "0644";
         owner = config.users.users."${user}".name;
         group = config.users.users."${user}".group;
         restartUnits = [ "sshd.service" ];
       };
       "ssh-keys-private/pi4" = {
-        sopsFile = ../../secrets/secrets.yaml;
+        sopsFile = ../../../secrets/secrets.yaml;
         mode = "0600";
         owner = config.users.users."${user}".name;
         group = config.users.users."${user}".group;
         restartUnits = [ "sshd.service" ];
       };
       "ssh-keys-public/pi5" = {
-        sopsFile = ../../secrets/secrets.yaml;
+        sopsFile = ../../../secrets/secrets.yaml;
         neededForUsers = true;
         mode = "0600";
         owner = config.users.users.root.name;