bigbird: Add initial nas configuration
This commit is contained in:
parent
a367be6426
commit
a89a4b9b4a
GPG key ID:
A851D929D52FB93F
21
bigbird/Makefile
Normal file
21
bigbird/Makefile
Normal file
|
|
@ -0,0 +1,21 @@
|
|||
# https://stackoverflow.com/a/23324703
|
||||
current_dir:=$(shell dirname $(realpath $(firstword $(MAKEFILE_LIST))))
|
||||
|
||||
.PHONY: remote-deploy
|
||||
remote-deploy:
|
||||
rsync -av $(current_dir)/ root@bigbird:config/
|
||||
ssh root@bigbird nixos-rebuild switch --fast -I nixos-config=/root/config/configuration.nix
|
||||
|
||||
## This probably doesn't work, since architectures are different?
|
||||
# .PHONY: deploy
|
||||
# deploy:
|
||||
# nixos-rebuild switch --fast -I nixos-config=./configuration.nix --build-host root@animal.chandlerswift.com --target-host root@animal.chandlerswift.com
|
||||
|
||||
.PHONY: remote-deploy-upgrade
|
||||
remote-deploy-upgrade:
|
||||
rsync -avz $(current_dir)/ root@animal.chandlerswift.com:config/
|
||||
ssh root@animal.chandlerswift.com nixos-rebuild switch --upgrade-all --fast -I nixos-config=/root/config/configuration.nix
|
||||
|
||||
# TODO: build an SD card?
|
||||
#sd-image:
|
||||
# nix-build '<nixpkgs/nixos>'
|
||||
63
bigbird/configuration.nix
Normal file
63
bigbird/configuration.nix
Normal file
|
|
@ -0,0 +1,63 @@
|
|||
{ config, lib, pkgs, ... }:
|
||||
{
|
||||
imports =
|
||||
[ # Include the results of the hardware scan.
|
||||
# <nixpkgs/nixos/modules/installer/sd-card/sd-image-aarch64.nix>
|
||||
./hardware-configuration.nix
|
||||
./kathe.nix
|
||||
./smb.nix
|
||||
];
|
||||
|
||||
# Use the extlinux boot loader. (NixOS wants to enable GRUB by default)
|
||||
boot.loader.grub.enable = false;
|
||||
# Enables the generation of /boot/extlinux/extlinux.conf
|
||||
boot.loader.generic-extlinux-compatible.enable = true;
|
||||
|
||||
networking.hostName = "bigbird"; # Define your hostname.
|
||||
networking.networkmanager.enable = true;
|
||||
|
||||
# Enable ZFS: https://openzfs.github.io/openzfs-docs/Getting%20Started/NixOS/index.html
|
||||
boot.supportedFilesystems = [ "zfs" ];
|
||||
boot.zfs.forceImportRoot = false;
|
||||
boot.zfs.extraPools = [ "nas" ];
|
||||
|
||||
networking.hostId = "66abd088"; # `openssl rand -hex 4`
|
||||
|
||||
time.timeZone = "America/Chicago";
|
||||
|
||||
i18n.defaultLocale = "en_US.UTF-8";
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
vim
|
||||
rsync
|
||||
];
|
||||
|
||||
services.openssh.enable = true;
|
||||
services.openssh.settings.PasswordAuthentication = false;
|
||||
users.users.root.openssh.authorizedKeys.keys = [''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEhPyyqS3BGYor3zLbjc8hZuhem3mS8TNmvWogXcnz/b chandler@chandlerswift.com'' ];
|
||||
|
||||
# Open ports in the firewall.
|
||||
# networking.firewall.allowedTCPPorts = [ ... ];
|
||||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||||
# Or disable the firewall altogether.
|
||||
# networking.firewall.enable = false;
|
||||
|
||||
# This option defines the first version of NixOS you have installed on this particular machine,
|
||||
# and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
|
||||
#
|
||||
# Most users should NEVER change this value after the initial install, for any reason,
|
||||
# even if you've upgraded your system to a new NixOS release.
|
||||
#
|
||||
# This value does NOT affect the Nixpkgs version your packages and OS are pulled from,
|
||||
# so changing it will NOT upgrade your system - see https://nixos.org/manual/nixos/stable/#sec-upgrading for how
|
||||
# to actually do that.
|
||||
#
|
||||
# This value being lower than the current NixOS release does NOT mean your system is
|
||||
# out of date, out of support, or vulnerable.
|
||||
#
|
||||
# Do NOT change this value unless you have manually inspected all the changes it would make to your configuration,
|
||||
# and migrated your data accordingly.
|
||||
#
|
||||
# For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
|
||||
system.stateVersion = "24.05"; # Did you read the comment?
|
||||
}
|
||||
31
bigbird/hardware-configuration.nix
Normal file
31
bigbird/hardware-configuration.nix
Normal file
|
|
@ -0,0 +1,31 @@
|
|||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||
# and may be overwritten by future invocations. Please make changes
|
||||
# to /etc/nixos/configuration.nix instead.
|
||||
{ config, lib, pkgs, modulesPath, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[ (modulesPath + "/installer/scan/not-detected.nix")
|
||||
];
|
||||
|
||||
boot.initrd.availableKernelModules = [ ];
|
||||
boot.initrd.kernelModules = [ ];
|
||||
boot.kernelModules = [ ];
|
||||
boot.extraModulePackages = [ ];
|
||||
|
||||
fileSystems."/" =
|
||||
{ device = "/dev/disk/by-uuid/44444444-4444-4444-8888-888888888888";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
swapDevices = [ ];
|
||||
|
||||
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
||||
# (the default) this is the recommended approach. When using systemd-networkd it's
|
||||
# still possible to use this option, but it's recommended to use it in conjunction
|
||||
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
|
||||
networking.useDHCP = lib.mkDefault true;
|
||||
# networking.interfaces.end0.useDHCP = lib.mkDefault true;
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "aarch64-linux";
|
||||
}
|
||||
12
bigbird/kathe.nix
Normal file
12
bigbird/kathe.nix
Normal file
|
|
@ -0,0 +1,12 @@
|
|||
{
|
||||
users.users.kathe = {
|
||||
isNormalUser = true;
|
||||
description = "Käthe Swift";
|
||||
openssh.authorizedKeys.keys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMJFkFEKuT9v9B9ynAf5QfLZF54jWhzEnQIeW2kQWKJ+ kathe.t.swift@gmail.com"
|
||||
];
|
||||
packages = with pkgs; [
|
||||
#
|
||||
];
|
||||
};
|
||||
}
|
||||
48
bigbird/smb.nix
Normal file
48
bigbird/smb.nix
Normal file
|
|
@ -0,0 +1,48 @@
|
|||
{
|
||||
services.samba = {
|
||||
enable = true;
|
||||
securityType = "user";
|
||||
openFirewall = true;
|
||||
## Switch to structured config with NixOS 24.11
|
||||
# settings = {
|
||||
# global = {
|
||||
# "workgroup" = "WORKGROUP";
|
||||
# "hosts allow" = "192.168.";
|
||||
# "hosts deny" = "0.0.0.0/0";
|
||||
# "guest account" = "nobody";
|
||||
# "map to guest" = "bad user";
|
||||
# };
|
||||
# "public" = {
|
||||
# "path" = "/nas/chandler/Public";
|
||||
# "browseable" = "yes";
|
||||
# "read only" = "yes";
|
||||
# "guest ok" = "yes"; # aka "public = yes"
|
||||
# };
|
||||
# # "private" = {
|
||||
# # "path" = "/mnt/Shares/Private";
|
||||
# # "browseable" = "yes";
|
||||
# # "read only" = "no";
|
||||
# # "guest ok" = "no";
|
||||
# # "create mask" = "0644";
|
||||
# # "directory mask" = "0755";
|
||||
# # "force user" = "username";
|
||||
# # "force group" = "groupname";
|
||||
# # };
|
||||
# };
|
||||
extraConfig = ''
|
||||
workgroup = WORKGROUP
|
||||
hosts allow = 192.168.
|
||||
hosts deny = 0.0.0.0/0
|
||||
guest account = nobody
|
||||
map to guest = bad user
|
||||
'';
|
||||
shares = {
|
||||
"public" = {
|
||||
"path" = "/nas/chandler/public";
|
||||
"browseable" = "yes";
|
||||
"read only" = "yes";
|
||||
"guest ok" = "yes"; # aka "public = yes"
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
Loading…
Reference in a new issue