mjallen/nix-config
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

idk

Browse Source
This commit is contained in:
mjallen18
2025-08-21 15:39:24 -05:00
parent 6025b6c4f1
commit bd64283f04
14 changed files with 768 additions and 346 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
systems/aarch64-linux/macbook-pro-nixos/default.nix
View File

@@ -15,7 +15,7 @@ in
imports = [
./boot.nix
./hardware-configuration.nix
./networking.nix
# ./networking.nix - moved to modules/nixos/network
./services.nix
];
@@ -58,6 +58,28 @@ in
};
network = {
hostName = "macbook-pro-nixos";
wifi.enable = false;
iwd = {
enable = true;
settings = {
General = {
EnableNetworkConfiguration = true;
};
Rank = {
BandModifier2_4GHz = 1.0;
BandModifier5GHz = 5.0;
BandModifier6GHz = 10.0;
};
Network = {
AutoConnect = true;
};
};
};
extraFirewallCommands = ''
iptables -I INPUT -m pkttype --pkt-type multicast -j ACCEPT
iptables -A INPUT -m pkttype --pkt-type multicast -j ACCEPT
iptables -I INPUT -p udp -m udp --match multiport --dports 1990,2021 -j ACCEPT
'';
};
};

22
systems/aarch64-linux/pi4/default.nix
View File

@@ -17,13 +17,31 @@ in
imports = [
./adguard.nix
./boot.nix
./networking.nix
# ./networking.nix - moved to modules/nixos/network
./sops.nix
];
${namespace} = {
hardware.disko.enable = true;
network.hostName = "pi4";
network = {
hostName = "pi4";
ipv4 = {
method = "manual";
address = "10.0.1.2/24";
gateway = "10.0.1.1";
dns = "1.1.1.1";
};
firewall = {
enable = true;
allowPing = true;
allowedTCPPorts = [ 53 ];
allowedUDPPorts = [ 53 ];
};
wifi = {
enable = true;
powersave = false;
};
};
};
# Configure nixpkgs

11
systems/aarch64-linux/pi5/default.nix
View File

@@ -17,7 +17,7 @@ in
{
imports = [
./boot.nix
./networking.nix
# ./networking.nix - moved to modules/nixos/network
./services.nix
./sops.nix
];
@@ -27,6 +27,15 @@ in
desktop.hyprland.enable = false;
network = {
hostName = "pi5";
ipv4 = {
method = "manual";
gateway = "10.0.1.1";
dns = "10.0.1.1";
};
firewall = {
enable = true;
allowPing = true;
};
};
};

13
systems/x86_64-linux/desktop/default.nix
View File

@@ -28,7 +28,7 @@ in
./configuration.nix
./filesystems.nix
./hardware-configuration.nix
# ./networking.nix
# ./networking.nix - moved to modules/nixos/network
./nix.nix
./sops.nix
@@ -38,10 +38,21 @@ in
];
${namespace} = {
hardware.disko.enable = false;
bootloader.lanzaboote.enable = true;
desktop.gnome.enable = true;
network = {
hostName = "matt-nixos";
wifi = {
enable = true;
powersave = false;
profiles = {
"Joey's Jungle 6G" = {
ssid = "Joey's Jungle 6G";
keyMgmt = "sae";
};
};
};
};
user = {
passwordFile = passwordFile;

63
systems/x86_64-linux/nas/default.nix
View File

@@ -17,7 +17,7 @@
./boot.nix
./apps.nix
./grafana.nix
./networking.nix
# ./networking.nix - moved to modules/nixos/network
./ups.nix
./users.nix
./samba.nix
@@ -44,6 +44,67 @@
ipv4 = {
address = "10.0.1.3/24";
method = "manual";
gateway = "10.0.1.1";
interface = "wlp6s0";
};
useNetworkd = true;
hostId = "4b501480";
nat = {
enable = true;
internalInterfaces = [ "ve-+" ];
externalInterface = "wlp6s0";
enableIPv6 = true;
};
firewall = {
enable = true;
allowPing = true;
allowedTCPPorts = [
8008 # restic
9000 # authentik
2342 # grafana
51820 # wireguard
1025
1143
10200
10300
8127
9980 # onlyoffice
4000 # netbootxyz
4080 # netbootxyz
3000 # gitea
2222 # gitea ssh
3300
9898
6754 # lubelogger
2283 # immich
4444 # code-server
9012
8192
];
allowedUDPPorts = [
8008 # restic
9000 # authentik
2342 # grafana
51820 # wireguard
1025
1143
10200
10300
8127
9980 # onlyoffice
4000 # netbootxyz
4080 # netbootxyz
3000 # gitea
2222 # gitea ssh
3300
9898
6754 # lubelogger
2283 # immich
4444 # code-server
9012
8192
];
trustedInterfaces = [ "tailscale0" ];
};
};
user = {

28
systems/x86_64-linux/nuc/default.nix
View File

@@ -6,7 +6,7 @@
{
imports = [
./boot.nix
./networking.nix
# ./networking.nix - moved to modules/nixos/network
./users.nix
./sops.nix
];
@@ -18,7 +18,31 @@
${namespace} = {
services.home-assistant.enable = true;
hardware.disko.enable = true;
network.hostName = "nuc-nixos";
network = {
hostName = "nuc-nixos";
useNetworkd = true;
ipv4 = {
method = "manual";
address = "10.0.1.4/24";
gateway = "10.0.1.1";
dns = "10.0.1.1";
};
wifi = {
enable = true;
profiles = {
"Joey's Jungle 6G" = {
ssid = "Joey's Jungle 6G";
keyMgmt = "sae";
};
};
};
firewall = {
enable = true;
allowPing = true;
allowedTCPPorts = [ 8192 ];
allowedUDPPorts = [ 8192 ];
};
};
};
# Enable nix flakes and nix-command tools

17
systems/x86_64-linux/steamdeck/default.nix
View File

@@ -15,17 +15,30 @@
./boot.nix
./configuration.nix
./jovian.nix
./networking.nix
# ./networking.nix - moved to modules/nixos/network
./sops.nix
];
${namespace} = {
hardware.disko.enable = true;
impermanence.enable = true;
bootloader.lanzaboote.enable = true;
desktop.gnome.enable = true;
user = {
name = "deck";
};
network.hostName = "steamdeck";
network = {
hostName = "steamdeck";
wifi = {
enable = true;
powersave = false;
profiles = {
"Joey's Jungle 5G" = {
ssid = "Joey's Jungle 5G";
keyMgmt = "sae";
};
};
};
};
};
}