This commit is contained in:
iFargle 2023-09-21 19:32:42 +09:00
parent 46f5acedb8
commit 8a8f202bf9
4 changed files with 2 additions and 41 deletions

View file

@ -9,7 +9,6 @@
./common/services/fail2ban.nix ./common/services/fail2ban.nix
./common/services/telegraf.nix ./common/services/telegraf.nix
./common/services/tailscale.nix ./common/services/tailscale.nix
./common/services/fwupd.nix
./common/services/gnupg-agent.nix ./common/services/gnupg-agent.nix
./common/services/opensnitch.nix ./common/services/opensnitch.nix

View file

@ -1,6 +1,7 @@
{ inputs, config, lib, pkgs, modulesPath, desktop, username, ... }: { { inputs, config, lib, pkgs, modulesPath, desktop, username, ... }: {
imports = [ imports = [
(modulesPath + "/installer/scan/not-detected.nix") (modulesPath + "/installer/scan/not-detected.nix")
./disks.nix
../../common/services/powertop.nix ../../common/services/powertop.nix
../../common/modules/secureboot.nix ../../common/modules/secureboot.nix
]; ];

View file

@ -1,38 +0,0 @@
{ disks ? }: {
disko.devices = {
disk = {
vda = {
type = "disk";
device = "/dev/vda";
content = {
type = "gpt";
partitions = {
ESP = {
size = "100M";
type = "EF00";
content = {
type = "filesystem";
format = "vfat";
mountpoint = "/boot";
};
};
luks = {
size = "100%";
content = {
type = "luks";
name = "crypted";
extraOpenArgs = [ "--allow-discards" ];
passwordFile = "/tmp/secret.key";
content = {
type = "filesystem";
format = "ext4";
mountpoint = "/";
};
};
};
};
};
};
};
};
}

View file

@ -1,10 +1,9 @@
{ config, lib, pkgs, modulesPath, desktop, username, ... }: { { config, lib, pkgs, modulesPath, desktop, username, ... }: {
nixpkgs.config.allowUnfree = false; nixpkgs.config.allowUnfree = false;
networking.useDHCP = lib.mkDefault true;
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
networking.hostName = "nixos-linode-img"; networking.hostName = "nixos-linode-img";
networking.firewall.allowedTCPPorts = [ 22 ]; networking.firewall.allowedTCPPorts = [ 22 ];
networking.useDHCP = lib.mkForce false;
networking.enableIPv6 = lib.mkForce false;
} }