154 lines
4.3 KiB
Nix
154 lines
4.3 KiB
Nix
{
|
|
pkgs,
|
|
namespace,
|
|
...
|
|
}:
|
|
{
|
|
${namespace} = {
|
|
# ###################################################
|
|
# # Boot # #
|
|
# ###################################################
|
|
|
|
bootloader.lanzaboote.enable = true;
|
|
|
|
# ###################################################
|
|
# # Hardware # #
|
|
# ###################################################
|
|
|
|
hardware.disko = {
|
|
enable = true;
|
|
enableLuks = true;
|
|
filesystem = "btrfs";
|
|
# rootDisk = "/dev/loop0";
|
|
};
|
|
|
|
headless.enable = true;
|
|
|
|
# ###################################################
|
|
# # Impermanence # #
|
|
# ###################################################
|
|
|
|
impermanence = {
|
|
enable = true;
|
|
extraDirectories = [
|
|
"/var/lib/private/esphome"
|
|
"/var/lib/homeassistant"
|
|
"/var/lib/mosquitto"
|
|
"/var/lib/music-assistant"
|
|
"/var/lib/postgresql"
|
|
"/var/lib/zigbee2mqtt"
|
|
];
|
|
};
|
|
|
|
# ###################################################
|
|
# # Network # #
|
|
# ###################################################
|
|
|
|
network = {
|
|
hostName = "nuc-nixos";
|
|
ipv4 = {
|
|
method = "manual";
|
|
address = "10.0.1.4/24";
|
|
gateway = "10.0.1.1";
|
|
dns = "10.0.1.1";
|
|
interface = "enp2s0";
|
|
};
|
|
firewall = {
|
|
enable = true;
|
|
allowPing = true;
|
|
allowedTCPPorts = [
|
|
1883 # MQTT broker (mosquitto) for IoT devices
|
|
8192
|
|
8880
|
|
8881
|
|
];
|
|
allowedUDPPorts = [
|
|
8192
|
|
8880
|
|
8881
|
|
];
|
|
};
|
|
};
|
|
|
|
# ###################################################
|
|
# # Security # #
|
|
# ###################################################
|
|
|
|
security.tpm.enable = true;
|
|
|
|
# ###################################################
|
|
# # Services # #
|
|
# ###################################################
|
|
|
|
services = {
|
|
home-assistant = {
|
|
enable = true;
|
|
automation = {
|
|
lightswitch = {
|
|
living-room-lights = {
|
|
id = 1741726347213;
|
|
alias = "Living Room Light Switch";
|
|
mqttDeviceId = "c90174f076a500c6fd531ecd7e5e259b";
|
|
lightEntityId = "light.living_room_lights";
|
|
};
|
|
bedroom-lights = {
|
|
id = 1741726231261;
|
|
alias = "Bedroom Light Switch";
|
|
mqttDeviceId = "7578af456fc02ac36bf3c4e414ac0bd9";
|
|
lightEntityId = "light.bedroom_lights";
|
|
};
|
|
};
|
|
|
|
motion-light = {
|
|
bedroom-closet-lights = {
|
|
id = 1769548321857;
|
|
alias = "Bedroom Closet Lights";
|
|
motion-sensor = {
|
|
mqttDeviceId = "fd73c1f3dfe08ab13d187fb49d781060";
|
|
mqttEntityId = "33b83e8db95b213b16b4b8c1f591ec92";
|
|
};
|
|
switch = {
|
|
deviceId = "a3dfab0c8d91554a7c92c65cdf655c86";
|
|
entityId = "645855b6f4347d65f5a54c33b3a9a1d0";
|
|
};
|
|
};
|
|
front-closet-lights = {
|
|
id = 1769548321857;
|
|
alias = "Front Closet Lights";
|
|
motion-sensor = {
|
|
mqttDeviceId = "7eb61ed09e48c1dcef8bcc0f7765c459";
|
|
mqttEntityId = "a8b48ad080e70a0cdbb991b79c607ca1";
|
|
};
|
|
light = {
|
|
entityId = "light.front_closet_lights";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
otbr = {
|
|
enable = true;
|
|
restPort = 8881;
|
|
port = 8880;
|
|
};
|
|
};
|
|
|
|
# ###################################################
|
|
# # User # #
|
|
# ###################################################
|
|
|
|
user = {
|
|
name = "admin";
|
|
linger = true;
|
|
};
|
|
};
|
|
|
|
# ###################################################
|
|
# # Boot # #
|
|
# ###################################################
|
|
|
|
boot.kernelPackages = pkgs.cachyosKernels.linuxPackages-cachyos-latest-lto-x86_64-v4;
|
|
fileSystems."/etc".neededForBoot = true;
|
|
|
|
}
|