forgejo good, nginx coming along

This commit is contained in:
Julian Sutter 2026-02-15 22:46:17 -08:00
parent 29eb6493be
commit 8fdbb33939
40 changed files with 153 additions and 493 deletions

0
systems/aurora.nix Normal file → Executable file
View file

22
systems/common.nix Normal file → Executable file
View file

@ -61,12 +61,6 @@
# Services
security.rtkit.enable = true;
services.pipewire = {
enable = true;
alsa.enable = true;
alsa.support32Bit = true;
pulse.enable = true;
};
services.openssh.enable = true;
security.polkit.enable = true;
programs.zsh.enable = true;
@ -103,7 +97,6 @@
python3
pv
whois
kdePackages.xdg-desktop-portal-kde
fwupd
usbutils # lsusb
pciutils # lspci
@ -113,23 +106,8 @@
nvme-cli
smartmontools
ripgrep
mesa-demos
];
services.flatpak.enable = true;
fonts.packages = with pkgs; [
noto-fonts-color-emoji
noto-fonts-cjk-sans
liberation_ttf
fira-code
fira-code-symbols
mplus-outline-fonts.githubRelease
dina-font
proggyfonts
];
services.xserver.excludePackages = [ pkgs.xterm ];
documentation.nixos.enable = false;
systemd.network.wait-online.enable = false;

29
systems/desktop.nix Executable file
View file

@ -0,0 +1,29 @@
{ config, pkgs, ... }:
services.pipewire = {
enable = true;
alsa.enable = true;
alsa.support32Bit = true;
pulse.enable = true;
};
environment.systemPackages = with pkgs; [
kdePackages.xdg-desktop-portal-kde
mesa-demos
];
services.flatpak.enable = true;
fonts.packages = with pkgs; [
noto-fonts-color-emoji
noto-fonts-cjk-sans
liberation_ttf
fira-code
fira-code-symbols
mplus-outline-fonts.githubRelease
dina-font
proggyfonts
];
services.xserver.excludePackages = [ pkgs.xterm ];
}

0
systems/framework.nix Normal file → Executable file
View file

0
systems/labrizor.nix Normal file → Executable file
View file

View file

@ -1,71 +0,0 @@
{ config, lib, pkgs, modulesPath, ... }: {
networking.hostName = "skip01";
# CPU Settings for 13th gen Intel Core i5
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
# Boot and kernel modules for Intel NUC
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usb_storage" "sd_mod" ];
boot.initrd.kernelModules = [ ]; # No graphics drivers needed for headless
boot.kernelModules = [ "kvm-intel" ]; # Intel virtualization support
boot.extraModulePackages = [];
# Server-specific kernel parameters
boot.kernelParams = [
"intel_iommu=on" # Enable IOMMU for virtualization
];
networking.useDHCP = lib.mkDefault true;
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
# No graphics support needed for headless server
# Power management optimized for server use
powerManagement = {
enable = true;
cpuFreqGovernor = "ondemand";
};
# Thermal management
services.thermald.enable = true;
# Server-oriented settings
services.openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
PermitRootLogin = "no";
};
};
# Swap configuration (smaller for server use)
swapDevices = [
{
device = "/swapfile";
size = 8192; # 8GB swap for server workload
priority = 0;
}
];
# Enable hardware monitoring (CLI only)
hardware.sensor.iio.enable = true;
# Network performance tuning for server use
boot.kernel.sysctl = {
"net.core.rmem_max" = 134217728;
"net.core.wmem_max" = 134217728;
"net.ipv4.tcp_rmem" = "4096 65536 134217728";
"net.ipv4.tcp_wmem" = "4096 65536 134217728";
"net.core.netdev_max_backlog" = 5000;
};
# Disable unnecessary services for server use
services.xserver.enable = lib.mkForce false;
services.pipewire.enable = lib.mkForce false;
# Enable container support for future server services
virtualisation.docker.enable = true;
virtualisation.podman.enable = lib.mkDefault true;
}

36
systems/warp.nix Normal file → Executable file
View file

@ -1,32 +1,33 @@
{ config, lib, pkgs, modulesPath, ... }: {
networking.hostName = "warp";
# CPU Settings for 13th gen Intel Core
fileSystems."/" =
{ device = "/dev/disk/by-partlabel/primary";
fsType = "ext4";
};
fileSystems."/boot" =
{ device = "/dev/disk/by-partlabel/ESP";
fsType = "vfat";
};
# CPU Settings for 13th gen Intel Core i5
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
# Boot and kernel modules for Intel NUC
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
# File system configuration - placeholder for actual hardware
fileSystems."/" = {
device = "/dev/disk/by-label/nixos";
fsType = "ext4";
};
boot.initrd.kernelModules = [];
boot.kernelModules = [ "kvm-intel" ];
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usb_storage" "sd_mod" ];
boot.initrd.kernelModules = [ ]; # No graphics drivers needed for headless
boot.kernelModules = [ "kvm-intel" ]; # Intel virtualization support
boot.extraModulePackages = [];
# Server-specific kernel parameters
boot.kernelParams = [
"intel_iommu=on"
"intel_iommu=on" # Enable IOMMU for virtualization
];
networking.useDHCP = lib.mkDefault true;
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
# No graphics support needed for headless server
# Power management optimized for server use
powerManagement = {
enable = true;
@ -46,16 +47,16 @@
};
};
# Swap configuration
# Swap configuration (smaller for server use)
swapDevices = [
{
device = "/swapfile";
size = 8192;
size = 8192; # 8GB swap for server workload
priority = 0;
}
];
# Enable hardware monitoring
# Enable hardware monitoring (CLI only)
hardware.sensor.iio.enable = true;
# Network performance tuning for server use
@ -70,9 +71,8 @@
# Disable unnecessary services for server use
services.xserver.enable = lib.mkForce false;
services.pipewire.enable = lib.mkForce false;
services.flatpak.enable = lib.mkForce false;
# Enable container support for server services
# Enable container support for future server services
virtualisation.docker.enable = true;
virtualisation.podman.enable = lib.mkDefault true;
}