forgejo good, nginx coming along
This commit is contained in:
parent
29eb6493be
commit
8fdbb33939
40 changed files with 153 additions and 493 deletions
0
systems/aurora.nix
Normal file → Executable file
0
systems/aurora.nix
Normal file → Executable file
22
systems/common.nix
Normal file → Executable file
22
systems/common.nix
Normal file → Executable file
|
|
@ -61,12 +61,6 @@
|
|||
|
||||
# Services
|
||||
security.rtkit.enable = true;
|
||||
services.pipewire = {
|
||||
enable = true;
|
||||
alsa.enable = true;
|
||||
alsa.support32Bit = true;
|
||||
pulse.enable = true;
|
||||
};
|
||||
services.openssh.enable = true;
|
||||
security.polkit.enable = true;
|
||||
programs.zsh.enable = true;
|
||||
|
|
@ -103,7 +97,6 @@
|
|||
python3
|
||||
pv
|
||||
whois
|
||||
kdePackages.xdg-desktop-portal-kde
|
||||
fwupd
|
||||
usbutils # lsusb
|
||||
pciutils # lspci
|
||||
|
|
@ -113,23 +106,8 @@
|
|||
nvme-cli
|
||||
smartmontools
|
||||
ripgrep
|
||||
mesa-demos
|
||||
];
|
||||
|
||||
services.flatpak.enable = true;
|
||||
|
||||
fonts.packages = with pkgs; [
|
||||
noto-fonts-color-emoji
|
||||
noto-fonts-cjk-sans
|
||||
liberation_ttf
|
||||
fira-code
|
||||
fira-code-symbols
|
||||
mplus-outline-fonts.githubRelease
|
||||
dina-font
|
||||
proggyfonts
|
||||
];
|
||||
|
||||
services.xserver.excludePackages = [ pkgs.xterm ];
|
||||
documentation.nixos.enable = false;
|
||||
|
||||
systemd.network.wait-online.enable = false;
|
||||
|
|
|
|||
29
systems/desktop.nix
Executable file
29
systems/desktop.nix
Executable file
|
|
@ -0,0 +1,29 @@
|
|||
{ config, pkgs, ... }:
|
||||
|
||||
services.pipewire = {
|
||||
enable = true;
|
||||
alsa.enable = true;
|
||||
alsa.support32Bit = true;
|
||||
pulse.enable = true;
|
||||
};
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
kdePackages.xdg-desktop-portal-kde
|
||||
mesa-demos
|
||||
];
|
||||
|
||||
services.flatpak.enable = true;
|
||||
|
||||
fonts.packages = with pkgs; [
|
||||
noto-fonts-color-emoji
|
||||
noto-fonts-cjk-sans
|
||||
liberation_ttf
|
||||
fira-code
|
||||
fira-code-symbols
|
||||
mplus-outline-fonts.githubRelease
|
||||
dina-font
|
||||
proggyfonts
|
||||
];
|
||||
|
||||
services.xserver.excludePackages = [ pkgs.xterm ];
|
||||
}
|
||||
0
systems/framework.nix
Normal file → Executable file
0
systems/framework.nix
Normal file → Executable file
0
systems/labrizor.nix
Normal file → Executable file
0
systems/labrizor.nix
Normal file → Executable file
|
|
@ -1,71 +0,0 @@
|
|||
{ config, lib, pkgs, modulesPath, ... }: {
|
||||
networking.hostName = "skip01";
|
||||
|
||||
# CPU Settings for 13th gen Intel Core i5
|
||||
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
|
||||
# Boot and kernel modules for Intel NUC
|
||||
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usb_storage" "sd_mod" ];
|
||||
boot.initrd.kernelModules = [ ]; # No graphics drivers needed for headless
|
||||
boot.kernelModules = [ "kvm-intel" ]; # Intel virtualization support
|
||||
boot.extraModulePackages = [];
|
||||
|
||||
# Server-specific kernel parameters
|
||||
boot.kernelParams = [
|
||||
"intel_iommu=on" # Enable IOMMU for virtualization
|
||||
];
|
||||
|
||||
networking.useDHCP = lib.mkDefault true;
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
|
||||
# No graphics support needed for headless server
|
||||
|
||||
# Power management optimized for server use
|
||||
powerManagement = {
|
||||
enable = true;
|
||||
cpuFreqGovernor = "ondemand";
|
||||
};
|
||||
|
||||
# Thermal management
|
||||
services.thermald.enable = true;
|
||||
|
||||
# Server-oriented settings
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
settings = {
|
||||
PasswordAuthentication = false;
|
||||
KbdInteractiveAuthentication = false;
|
||||
PermitRootLogin = "no";
|
||||
};
|
||||
};
|
||||
|
||||
# Swap configuration (smaller for server use)
|
||||
swapDevices = [
|
||||
{
|
||||
device = "/swapfile";
|
||||
size = 8192; # 8GB swap for server workload
|
||||
priority = 0;
|
||||
}
|
||||
];
|
||||
|
||||
# Enable hardware monitoring (CLI only)
|
||||
hardware.sensor.iio.enable = true;
|
||||
|
||||
# Network performance tuning for server use
|
||||
boot.kernel.sysctl = {
|
||||
"net.core.rmem_max" = 134217728;
|
||||
"net.core.wmem_max" = 134217728;
|
||||
"net.ipv4.tcp_rmem" = "4096 65536 134217728";
|
||||
"net.ipv4.tcp_wmem" = "4096 65536 134217728";
|
||||
"net.core.netdev_max_backlog" = 5000;
|
||||
};
|
||||
|
||||
# Disable unnecessary services for server use
|
||||
services.xserver.enable = lib.mkForce false;
|
||||
services.pipewire.enable = lib.mkForce false;
|
||||
|
||||
# Enable container support for future server services
|
||||
virtualisation.docker.enable = true;
|
||||
virtualisation.podman.enable = lib.mkDefault true;
|
||||
}
|
||||
36
systems/warp.nix
Normal file → Executable file
36
systems/warp.nix
Normal file → Executable file
|
|
@ -1,32 +1,33 @@
|
|||
{ config, lib, pkgs, modulesPath, ... }: {
|
||||
networking.hostName = "warp";
|
||||
|
||||
# CPU Settings for 13th gen Intel Core
|
||||
fileSystems."/" =
|
||||
{ device = "/dev/disk/by-partlabel/primary";
|
||||
fsType = "ext4";
|
||||
};
|
||||
fileSystems."/boot" =
|
||||
{ device = "/dev/disk/by-partlabel/ESP";
|
||||
fsType = "vfat";
|
||||
};
|
||||
|
||||
# CPU Settings for 13th gen Intel Core i5
|
||||
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
|
||||
# Boot and kernel modules for Intel NUC
|
||||
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
|
||||
|
||||
# File system configuration - placeholder for actual hardware
|
||||
fileSystems."/" = {
|
||||
device = "/dev/disk/by-label/nixos";
|
||||
fsType = "ext4";
|
||||
};
|
||||
boot.initrd.kernelModules = [];
|
||||
boot.kernelModules = [ "kvm-intel" ];
|
||||
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usb_storage" "sd_mod" ];
|
||||
boot.initrd.kernelModules = [ ]; # No graphics drivers needed for headless
|
||||
boot.kernelModules = [ "kvm-intel" ]; # Intel virtualization support
|
||||
boot.extraModulePackages = [];
|
||||
|
||||
# Server-specific kernel parameters
|
||||
boot.kernelParams = [
|
||||
"intel_iommu=on"
|
||||
"intel_iommu=on" # Enable IOMMU for virtualization
|
||||
];
|
||||
|
||||
networking.useDHCP = lib.mkDefault true;
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
|
||||
# No graphics support needed for headless server
|
||||
|
||||
# Power management optimized for server use
|
||||
powerManagement = {
|
||||
enable = true;
|
||||
|
|
@ -46,16 +47,16 @@
|
|||
};
|
||||
};
|
||||
|
||||
# Swap configuration
|
||||
# Swap configuration (smaller for server use)
|
||||
swapDevices = [
|
||||
{
|
||||
device = "/swapfile";
|
||||
size = 8192;
|
||||
size = 8192; # 8GB swap for server workload
|
||||
priority = 0;
|
||||
}
|
||||
];
|
||||
|
||||
# Enable hardware monitoring
|
||||
# Enable hardware monitoring (CLI only)
|
||||
hardware.sensor.iio.enable = true;
|
||||
|
||||
# Network performance tuning for server use
|
||||
|
|
@ -70,9 +71,8 @@
|
|||
# Disable unnecessary services for server use
|
||||
services.xserver.enable = lib.mkForce false;
|
||||
services.pipewire.enable = lib.mkForce false;
|
||||
services.flatpak.enable = lib.mkForce false;
|
||||
|
||||
# Enable container support for server services
|
||||
# Enable container support for future server services
|
||||
virtualisation.docker.enable = true;
|
||||
virtualisation.podman.enable = lib.mkDefault true;
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue