Skip to content

Commit

Permalink
feat(machine): introduce piecyk
Browse files Browse the repository at this point in the history
  • Loading branch information
ajgon committed Nov 5, 2024
1 parent aafcfef commit d77f6aa
Show file tree
Hide file tree
Showing 22 changed files with 543 additions and 66 deletions.
4 changes: 4 additions & 0 deletions .sops.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,3 +15,7 @@ creation_rules:
- age:
- *ajgon
- *deedee
- path_regex: piecyk/.*\.sops\.yaml$
key_groups:
- age:
- *ajgon
5 changes: 1 addition & 4 deletions machines/deedee/configuration.nix
Original file line number Diff line number Diff line change
Expand Up @@ -34,10 +34,7 @@ rec {
notificationSender = "deedee@${mySystem.rootDomain}";

alerts = {
pushover = {
enable = true;
envFileSopsSecret = "alerts/pushover/env";
};
pushover.enable = true;
};

autoUpgrade.enable = true;
Expand Down
5 changes: 4 additions & 1 deletion machines/default.nix
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,10 @@
...
}:
{
imports = [ ./deedee ];
imports = [
./deedee
./piecyk
];

options = {
flakePart = {
Expand Down
234 changes: 234 additions & 0 deletions machines/piecyk/configuration.nix
Original file line number Diff line number Diff line change
@@ -0,0 +1,234 @@
{
config,
lib,
pkgs,
...
}:
rec {
sops = {
defaultSopsFile = ./secrets.sops.yaml;
age.keyFile = "/etc/age/keys.txt";
secrets = {
"credentials/system/ajgon" = { };
"home/apps/ssh/private_key" = {
owner = mySystem.primaryUser;
};
};
};

mySystem = {
purpose = "Main rig";
filesystem = "zfs";
primaryUser = "ajgon";
primaryUserPasswordSopsSecret = "credentials/system/ajgon";
notificationEmail = "[email protected]";
notificationSender = "[email protected]";
allowUnfree = [
"discord"
"slack"
];

alerts = {
pushover.enable = true;
};

disks = {
enable = true;
hostId = "bdd71660";
swapSize = "4G";
systemDiskDevs = [
"/dev/disk/by-id/nvme-Patriot_P300_1TB_AA000000000000000047"
"/dev/disk/by-id/nvme-KINGSTON_SA2000M81000G_50026B7683D02486"
];
systemDatasets = {
nix = {
type = "zfs_fs";
mountpoint = "/nix";
};
};
};

grub.enable = true;

impermanence = {
enable = true;
persistPath = "/persist";
zfsPool = "rpool";
};

networking = {
enable = true;
firewallEnable = true;
hostname = "deedee";
mainInterface = {
name = "enp5s0";
bridge = true;
};
};

ssh = {
enable = true;
authorizedKeys = {
"${mySystem.primaryUser}" = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOrBLT88ZZ+lO8hHcj+4jqtor79OLhQZcDWF98kkWkfn personal"
];
};
};

xorg = {
enable = true;
windowManager = "awesome";
};
};

mySystemApps = {
docker = {
enable = true;
rootless = true;
};
plymouth.enable = true;
};

myHomeApps = {
aichat.enable = true;
git = {
appendOptions = {
userName = "Igor Rzegocki";
userEmail = "[email protected]";
signing = {
key = "[email protected]";
signByDefault = true;
};
};
};
gnupg = {
appendOptions = {
no-autostart = true;
};
forceCreateSocketDir = true;
publicKeys = [ ./public.gpg ];
};
ssh = {
appendOptions = {
matchBlocks = {
# private
deedee = {
forwardAgent = true;
host = "deedee";
hostname = "deedee.home.arpa";
identitiesOnly = true;
identityFile = [ config.sops.secrets."home/apps/ssh/private_key".path ];
port = 22;
user = "ajgon";
};
forgejo = {
forwardAgent = false;
host = "git.rzegocki.dev";
hostname = "git.rzegocki.dev";
identitiesOnly = true;
identityFile = [ config.sops.secrets."home/apps/ssh/private_key".path ];
port = 2222;
user = "git";
};
nas = {
forwardAgent = false;
host = "nas";
hostname = "nas.home.arpa";
identitiesOnly = true;
identityFile = [ config.sops.secrets."home/apps/ssh/private_key".path ];
port = 51008;
user = "ajgon";
};

# public
github = {
forwardAgent = false;
host = "github.com";
hostname = "github.com";
identitiesOnly = true;
identityFile = [ config.sops.secrets."home/apps/ssh/private_key".path ];
port = 22;
user = "git";
};
};
};
};

awesome = {
enable = true;
autorun = [
(lib.getExe pkgs.discord)
(lib.getExe pkgs.whatsie)
(lib.getExe pkgs.slack)
(lib.getExe pkgs.telegram-desktop)
];
};
caffeine.enable = true;
firefox = {
enable = true;
startupPage = "https://www.rzegocki.dev/";
syncServerUrl = "https://firefoxsync.rzegocki.dev";
whoogleSearch = {
enable = true;
url = "https://whoogle.rzegocki.dev";
};
};
mpv.enable = true;
redshift = {
enable = true;
latitude = 50.061389;
longitude = 19.938333;
};
rofi = {
enable = true;
passwordManager = "bitwarden";
bitwarden = {
email = "[email protected]";
base_url = "https://vaultwarden.rzegocki.dev/";
};
};
syncthing.enable = true;
thunderbird.enable = true;
wakatime = {
enable = true;
wakapi.url = "https://wakapi.rzegocki.dev";
};
xorg = {
autorandr = {
profile = {
fingerprint = {
"DP-2" = "00ffffffffffff000472b1061c118194301d0104b53c22783b2711ac5135b5260e50542348008140818081c081009500b300d1c001014dd000a0f0703e803020350055502100001ab46600a0f0701f800820180455502100001a000000fd0c3090ffff6b010a202020202020000000fc0058563237334b0a2020202020200247020343f151010304121305141f9007025d5e5f60613f2309070783010000e200c06d030c0010003878200060010203681a00000101309000e305e301e606070161561c0782805470384d400820f80c56502100001a40e7006aa0a06a500820980455502100001a6fc200a0a0a055503020350055502100001e0000000000007870127900000301289aa00184ff0ea0002f8021006f083e0003000500e0f600047f0759002f801f006f081900010003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003590";
"DP-0" = "00ffffffffffff000472830b000000000c210104b53c21783b1f51ae4e33a422125054bfef80714f8140818081c09500b300d1c0d1fc4dd000a0f0703e803020350055502100001a000000ff0039333132303239413032583030000000fd0030a0ffff82010a202020202020000000fc0058563237354b20560a2020202002a8020345f2555d5e5f6061014003111213040e0f1d1e1f903f75762309070783010000e305c301e20f18e30e7576e200d5e60605016969006d1a0000020130a00000695500006a5e00a0a0a029503020350055502100001e000000000000000000000000000000000000000000000000000000000000000000000000000000007970126700000300648cee0104ff0e9f002f001f006f082500020004001f9c0104ff0e9f002f001f006f08250002000400e51e0204ff0e81002f001f006f081b0002000400d3bc0004ff099f002f001f009f05280002000400378b00047f07170157002b0037042c00030004007e00000000000000000000000000000000000090";
};
config = {
"DP-2" = {
crtc = 0;
dpi = 192;
enable = true;
gamma = "1.099:1.0:0.909";
mode = "3840x2160";
position = "0x0";
primary = true;
rate = "119.91";
};
"DP-0" = {
crtc = 1;
dpi = 192;
enable = true;
gamma = "1.099:1.0:0.909";
mode = "3840x2160";
position = "3840x0";
rate = "120.00";
};
};
};
};
terminal = pkgs.alacritty;
};
zathura.enable = true;
zoom.enable = true;
zsh.promptColor = "magenta";
};

system.stateVersion = "24.11";
}
12 changes: 12 additions & 0 deletions machines/piecyk/default.nix
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
{ lib, ... }:
rec {
flakePart = {
nixosConfigurations.piecyk = lib.mkNixosConfig {
system = "x86_64-linux";
hardwareModules = [ ../../modules/hardware/desktop.nix ];
profileModules = [
./configuration.nix
];
};
};
}
109 changes: 109 additions & 0 deletions machines/piecyk/public.gpg
Original file line number Diff line number Diff line change
@@ -0,0 +1,109 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=ESDK
-----END PGP PUBLIC KEY BLOCK-----
Loading

0 comments on commit d77f6aa

Please sign in to comment.