improvements
This commit is contained in:
parent
8eac2df40e
commit
41ef809bf9
20 changed files with 73 additions and 234 deletions
|
@ -1,6 +1,6 @@
|
|||
{modulesPath, ...}: {
|
||||
imports = [
|
||||
(modulesPath + "/profiles/qemu-guest.nix")
|
||||
"${modulesPath}/profiles/qemu-guest.nix"
|
||||
|
||||
./atuin.nix
|
||||
./conduit.nix
|
||||
|
|
|
@ -1,67 +0,0 @@
|
|||
{
|
||||
config,
|
||||
lib,
|
||||
...
|
||||
}: {
|
||||
# TODO
|
||||
age.secrets = {
|
||||
hiraeth-jwt-sign-key = {
|
||||
file = ../../secrets/hiraeth-jwt-sign-key.age;
|
||||
owner = "hiraeth";
|
||||
group = "hiraeth";
|
||||
};
|
||||
|
||||
hiraeth-jwt-verify-key = {
|
||||
file = ../../secrets/hiraeth-jwt-verify-key.age;
|
||||
owner = "hiraeth";
|
||||
group = "hiraeth";
|
||||
};
|
||||
};
|
||||
|
||||
services = {
|
||||
postgresql = {
|
||||
enable = lib.mkDefault true;
|
||||
|
||||
ensureDatabases = ["hiraeth"];
|
||||
ensureUsers = [
|
||||
{
|
||||
name = "hiraeth";
|
||||
ensureDBOwnership = true;
|
||||
}
|
||||
];
|
||||
};
|
||||
|
||||
hiraeth = {
|
||||
enable = true;
|
||||
settings = {
|
||||
address = "127.0.0.1:8040";
|
||||
name = "hiraeth";
|
||||
db_type = "postgres";
|
||||
datadir = "/var/lib/hiraeth";
|
||||
dsn = "host=/run/postgresql user=hiraeth";
|
||||
jwt_sign_key_file = config.age.secrets.hiraeth-jwt-sign-key.path;
|
||||
jwt_verify_key_file = config.age.secrets.hiraeth-jwt-verify-key.path;
|
||||
chunk_size = 1024 * 1024 * 128;
|
||||
timeout = 60;
|
||||
inline_types = [
|
||||
"application/pdf"
|
||||
"audio/mpeg"
|
||||
"audio/flac"
|
||||
"audio/vorbis"
|
||||
"image/jpeg"
|
||||
"image/png"
|
||||
"text/plain"
|
||||
"video/mp4"
|
||||
];
|
||||
};
|
||||
};
|
||||
|
||||
nginx.virtualHosts."share.${config.networking.domain}" = {
|
||||
enableACME = true;
|
||||
forceSSL = true;
|
||||
quic = true;
|
||||
|
||||
locations."/".proxyPass = "http://${config.services.hiraeth.settings.address}";
|
||||
};
|
||||
};
|
||||
}
|
|
@ -4,7 +4,7 @@
|
|||
...
|
||||
}: {
|
||||
imports = [
|
||||
(modulesPath + "/installer/scan/not-detected.nix")
|
||||
"${modulesPath}/installer/scan/not-detected.nix"
|
||||
|
||||
inputs.hardware.nixosModules.lenovo-thinkpad-t480
|
||||
];
|
||||
|
|
|
@ -4,7 +4,7 @@
|
|||
...
|
||||
}: {
|
||||
imports = [
|
||||
(modulesPath + "/installer/scan/not-detected.nix")
|
||||
"${modulesPath}/installer/scan/not-detected.nix"
|
||||
|
||||
inputs.hardware.nixosModules.common-cpu-amd
|
||||
inputs.hardware.nixosModules.common-gpu-amd
|
||||
|
|
|
@ -1,25 +0,0 @@
|
|||
{
|
||||
inputs,
|
||||
modulesPath,
|
||||
...
|
||||
}: {
|
||||
imports = [
|
||||
(modulesPath + "/installer/scan/not-detected.nix")
|
||||
|
||||
inputs.hardware.nixosModules.lenovo-thinkpad-x260
|
||||
];
|
||||
|
||||
nixpkgs.hostPlatform = "x86_64-linux";
|
||||
|
||||
boot = {
|
||||
initrd.availableKernelModules = ["xhci_pci" "nvme" "usb_storage" "sd_mod"];
|
||||
kernelModules = ["kvm-intel"];
|
||||
};
|
||||
|
||||
system.stateVersion = "24.05";
|
||||
|
||||
powerManagement.cpuFreqGovernor = "powersave";
|
||||
|
||||
console.keyMap = "de";
|
||||
services.xserver.layout = "de";
|
||||
}
|
|
@ -4,7 +4,7 @@
|
|||
...
|
||||
}: {
|
||||
imports = [
|
||||
(modulesPath + "/installer/scan/not-detected.nix")
|
||||
"${modulesPath}/installer/scan/not-detected.nix"
|
||||
|
||||
inputs.hardware.nixosModules.common-cpu-intel
|
||||
inputs.hardware.nixosModules.common-gpu-intel
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue