albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Add a basic script for setup

Browse source
This commit is contained in:
iFargle 2023-09-18 16:16:55 +09:00
parent da53709c1b
commit 17c9a5eab5
3 changed files with 44 additions and 37 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
README.md
View file

@ -1,15 +1,8 @@
# NixOS Configuration Repository
## NOTE: These configs expect this repo to be cloned to /etc/nixos/git/
```
# First run as root:
nix-shell -p git --run git clone https://git.sysctl.io/albert/nix /etc/nixos/git
ln -s /etc/nixos/git/flake.nix /etc/nixos/flake.nix
nixos-rebuild switch --flake '/etc/nixos#<HOSTNAME>'
mkdir /nix/var/nix/profiles/per-user/<USERNAME>
### For first-run, see `setup.sh`
# as <USERNAME>:
home-manager switch -b backup --flake /etc/nixos/git
```
![Gruv'd Hyprland](./screenshot.png "Hyprland with a Gruvboxy theme")
---
# To Do List

28
sd-image.nix
View file

@ -1,28 +0,0 @@
# Raspberry Pi SD Image
# $ nix-build '<nixpkgs/nixos>' -A config.system.build.sdImage -I nixos-config=./sd-image.nix
# https://nixos.wiki/wiki/NixOS_on_ARM#Installation
{ config, lib, ... }:
let
desktop = null;
in {
# Simple bootstrap SD image for the Raspberry Pi
imports = [
<nixpkgs/nixos/modules/installer/sd-card/sd-image-aarch64.nix>
];
users.users.albert = {
isNormalUser = true;
description = "Albert J. Copeland";
extraGroups = [ "networkmanager" "wheel" ];
# mkpasswd -m sha-512
hashedPassword = "$y$j9T$wKLsIWaA4Gf63RvjedwLJ0$EHKL6BBJV0CAxEKcHHjaBqW085KJ/MGvmbyWzmcWOy6";
};
services.openssh = {
enable = true;
settings = {
PermitRootLogin = "no";
PasswordAuthentication = true;
};
};
}

42
setup.sh Normal file
View file

@ -0,0 +1,42 @@
#!env /bin/bash
# First setup:
user=albert
read -p "Hostname: " host;
# run as root:
sudo nix-shell -p git --run git clone https://git.sysctl.io/albert/nix /etc/nixos/git
sudo ln -s /etc/nixos/git/flake.nix /etc/nixos/flake.nix
sudo chown -R $user:root /etc/nixos/git
sudo nixos-rebuild switch --flake '/etc/nixos#$host'
sudo mkdir /nix/var/nix/profiles/per-user/$user
echo "Host setup complete."
# as $user:
home-manager switch -b backup --flake /etc/nixos/git
source ~/.bashrc
# Import and trust the GPG key
read -p "Path to GPG Private Key: " gpgKey
gpg --import $gpgKey
echo -e "5\ny\n" | gpg --command-fd 0 --expert --edit-key 64F6C4EB46C4543A trust
# Setup SOPS
sudo nix-shell -p ssh-to-pgp --run "ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key -o /etc/nixos/git/keys/hosts/$(host).asc"
cd /etc/nixos/git
nix-shell
sops-update secrets/secrets.yaml
# Set up ssh keys
ssh-keygen -t rsa -b 8192 -f ~/.ssh/id_rsa -N ""
echo "" >> /etc/nixos/git/keys/ssh/keys.txt
echo "# $user@$host" >> /etc/nixos/git/keys/ssh/keys.txt
cat .ssh/id_rsa.pub >> /etc/nixos/git/keys/ssh/keys.txt
# Add all changes to git and and push
git add keys/hosts/$(host).asc
git commit -am "Setup of host: $host"
git push
echo "Complete. Reboot to complete the config"