hardware updates

This commit is contained in:
Ellis Rahhal 2024-11-12 17:29:43 -08:00
parent 169192468a
commit f2c77a398e
3 changed files with 20 additions and 9 deletions

View file

@ -16,6 +16,13 @@ TODOS
* [ ] DNS (Dnsmasq or Unbound) * [ ] DNS (Dnsmasq or Unbound)
* [ ] qemu setup * [ ] qemu setup
* P2 * P2
* [ ] SOPS fixes
* [ ] consolidate to single script that works on host or on guest
* [ ] If no user key on guest, complain and abort
* [ ] Fix error messages that mess with getting fingerprit
* [ ] Make sure uid matches <curruser>@localhost, as it tells sops where to look for keyring
* [ ] Move hardware config to module config
* [ ] DB of hardware, similar to nixos-hardware repo
* [ ] Backups * [ ] Backups
* [ ] Migration of services from HP server, HA * [ ] Migration of services from HP server, HA
* [ ] SSO/Authentik * [ ] SSO/Authentik

View file

@ -55,7 +55,11 @@
adminHashedPassword = lib.mkOption { adminHashedPassword = lib.mkOption {
type = lib.types.str; type = lib.types.str;
default = ""; default = "";
description = "Hashed password for the system admin"; description = ''
Hashed password for the system admin
Generate with:
mkpasswd --method=SHA-512 --stdin
'';
}; };
authorizedKeys = lib.mkOption { authorizedKeys = lib.mkOption {
@ -87,13 +91,6 @@
default = false; default = false;
description = "Enable dynamic DNS client"; description = "Enable dynamic DNS client";
}; };
interval = lib.mkOption {
type = lib.types.str;
default = "10m";
description = "Interval for dynamic DNS client";
};
protocol = lib.mkOption { protocol = lib.mkOption {
type = lib.types.str; type = lib.types.str;
default = "hetzner"; default = "hetzner";
@ -112,6 +109,12 @@
description = "Zone for dynamic DNS client"; description = "Zone for dynamic DNS client";
}; };
interval = lib.mkOption {
type = lib.types.str;
default = "10m";
description = "Interval for dynamic DNS client";
};
domains = lib.mkOption { domains = lib.mkOption {
type = lib.types.listOf lib.types.str; type = lib.types.listOf lib.types.str;
default = [ "*" "www" "dev" ]; default = [ "*" "www" "dev" ];

View file

@ -8,7 +8,7 @@
[ (modulesPath + "/profiles/qemu-guest.nix") [ (modulesPath + "/profiles/qemu-guest.nix")
]; ];
boot.initrd.availableKernelModules = [ "ata_piix" "ahci" "xhci_pci" "virtio_pci" "virtio_blk" "floppy" "sd_mod" "sr_mod" ]; boot.initrd.availableKernelModules = [ "ata_piix" "ahci" "xhci_pci" "nvme" "virtio_pci" "virtio_blk" "floppy" "sd_mod" "sr_mod" "usb_storage" "usbhid" ];
boot.initrd.kernelModules = [ ]; boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-amd" "kvm-intel" ]; boot.kernelModules = [ "kvm-amd" "kvm-intel" ];
boot.extraModulePackages = [ ]; boot.extraModulePackages = [ ];
@ -45,4 +45,5 @@
# networking.interfaces.enp1s0.useDHCP = lib.mkDefault true; # networking.interfaces.enp1s0.useDHCP = lib.mkDefault true;
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
} }