halbg0tt/dotnix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

some changes

Browse Source
This commit is contained in:
halbg0tt
2026-07-06 23:38:33 +02:00
parent cbb71ecb9f
commit 0634620eee
33 changed files with 1 additions and 510 deletions
Download Patch File Download Diff File Expand all files Collapse all files
flake.nix
+1 -29
View File
@@ -34,7 +34,7 @@
specialArgs = { inherit inputs system; }; specialArgs = { inherit inputs system; };
modules = [ modules = [
nvf.nixosModules.default nvf.nixosModules.default
./hosts/darkstar/configuration.nix ./hosts/molniya/configuration.nix
home-manager.nixosModules.home-manager home-manager.nixosModules.home-manager
{ {
home-manager = { home-manager = {
@@ -46,34 +46,6 @@
} }
]; ];
}; };
# server (r320)
kepler = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
specialArgs = { inherit inputs system; };
modules = [
./hosts/kepler/configuration.nix
home-manager.nixosModules.home-manager
{
home-manager = {
useGlobalPkgs = true;
useUserPackages = true;
extraSpecialArgs = { inherit inputs; };
users.user = ./hosts/kepler/config/home/home.nix;
};
}
];
};
# router
voyager = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
specialArgs = { inherit inputs system; };
modules = [
./hosts/voyager/configuration.nix
];
};
}; };
}; };
} }
hosts/kepler/config/boot.nix
-25
View File
@@ -1,25 +0,0 @@
_:
{
boot = {
loader = {
systemd-boot = {
enable = true;
};
efi = {
canTouchEfiVariables = true;
};
};
initrd.systemd.enable = true;
supportedFilesystems = [ "zfs" ];
zfs = {
devNodes = "/dev/disk/by-id";
forceImportRoot = true;
forceImportAll = true;
};
kernelParams = [ "scsi_mod.scan=sync" "rootdelay=10" "zfs.zfs_arc_max=34359738368" ];
extraModprobeConfig = ''
options scsi_mod scan=sync
'';
};
}
hosts/kepler/config/default.nix
-15
View File
@@ -1,15 +0,0 @@
_:
{
imports = [
./boot.nix
./networking.nix
./gnupg.nix
./pkgs.nix
./system.nix
./ssh.nix
./jellyfin.nix
./shell.nix
./freedom/default.nix
./docker/default.nix
];
}
hosts/kepler/config/docker/default.nix
-21
View File
@@ -1,21 +0,0 @@
{ config, pkgs, ... }:
{
virtualisation = {
oci-containers = {
backend = "docker";
};
docker = {
enable = true;
enableOnBoot = true;
rootless = {
enable = true;
setSocketVariable = true;
};
};
};
imports = [
./gluetun.nix
./qbittorrent.nix
./jdownloader.nix
];
}
hosts/kepler/config/docker/gluetun.nix
-56
View File
@@ -1,56 +0,0 @@
{ config, pkgs, ... }:
let
protonvpnConfig = {
VPN_SERVICE_PROVIDER = "protonvpn";
VPN_PORT_FORWARDING = "on";
VPN_PORT_FORWARDING_PROVIDER="protonvpn";
};
gluetunConfig = {
SHADOWSOCKS = "on";
HTTPPROXY = "on";
HTTPPROXY_STEALTH = "on";
FIREWALL_OUTBOUND_SUBNETS="10.11.0.0/24";
DNS_UPSTREAM_RESOLVERS = "cloudflare";
BLOCK_SURVEILLANCE="on";
BLOCK_ADS="on";
BLOCK_MALICIOUS="on";
};
in
{
virtualisation.oci-containers.containers = {
# protonvpn
pvpn-de-01 = {
autoStart = true;
image = "qmcgaw/gluetun:latest";
capabilities = { NET_ADMIN = true; };
devices = [ "/dev/net/tun:/dev/net/tun" ];
environmentFiles = [
"/etc/secrets/gluetun.env"
];
environment = {
# GLUETUN ENV VARS #
VPN_TYPE="openvpn";
SERVER_COUNTRIES = "Germany";
VPN_INTERFACE="tun0";
} // protonvpnConfig // gluetunConfig;
ports = [
# gluetun
"8000:8000"
"7001:8388/tcp"
"7001:8388/udp"
"8001:8888"
# qbittorrent
"8080:8080"
"6881:6881/tcp"
"6881:6881/udp"
# jdownloader
"5800:5800"
];
};
};
}
hosts/kepler/config/docker/jdownloader.nix
-22
View File
@@ -1,22 +0,0 @@
_:
{
virtualisation.oci-containers.containers = {
# qbittorrent
jdownloader = {
autoStart = true;
image = "jlesage/jdownloader-2:latest";
networks = [
"container:pvpn-de-01"
];
environment = {
TZ="Europe/Berlin";
KEEP_APP_RUNNING="1";
DARK_MODE="1";
};
volumes = [
"/srv/docker/jdownloader/config:/config:rw"
"/srv/docker/jdownloader/downloads:/output:rw"
];
};
};
}
hosts/kepler/config/docker/qbittorrent.nix
-21
View File
@@ -1,21 +0,0 @@
_:
{
virtualisation.oci-containers.containers = {
# qbittorrent
qbittorrent = {
autoStart = true;
image = "qbittorrentofficial/qbittorrent-nox:latest";
networks = [
"container:pvpn-de-01"
];
environment = {
WEBUI_PORT = "8080";
TZ="Europe/Berlin";
};
volumes = [
"/srv/docker/qbittorrent/config:/config"
"/srv/docker/qbittorrent/downloads:/downloads"
];
};
};
}
hosts/kepler/config/freedom/default.nix
-9
View File
@@ -1,9 +0,0 @@
_:
{
imports = [
./invidious.nix
./nitter.nix
./tor.nix
./unbound.nix
];
}
hosts/kepler/config/freedom/invidious.nix
-9
View File
@@ -1,9 +0,0 @@
{ config, pkgs, ... }:
{
services = {
invidious = {
enable = true;
port = 3001;
};
};
}
hosts/kepler/config/freedom/nitter.nix
-14
View File
@@ -1,14 +0,0 @@
{ config, pkgs, ... }:
{
services = {
nitter = {
enable = true;
server = {
https = true;
port = 3002;
hostname = "nitter twitter";
};
};
};
}
hosts/kepler/config/freedom/tor.nix
-15
View File
@@ -1,15 +0,0 @@
_:
{
services.tor = {
enable = true;
enableGeoIP = true;
client = {
enable = true;
socksListenAddress = {
IsolateDestAddr = true;
addr = "10.11.0.10";
port = 9050;
};
};
};
}
hosts/kepler/config/freedom/unbound.nix
-28
View File
@@ -1,28 +0,0 @@
_:
{
services.unbound = {
enable = true;
enableRootTrustAnchor = true;
settings = {
server = {
interface = [ "127.0.0.1" "10.11.0.10" ];
access-control = [
"127.0.0.0/8 allow"
"10.11.0.0/24 allow"
];
prefetch = true;
prefetch-key = true;
qname-minimisation = true;
hide-identity = true;
hide-version = true;
harden-glue = true;
harden-below-nxdomain = true;
harden-dnssec-stripped = true;
};
};
};
}
hosts/kepler/config/git.nix
-4
View File
@@ -1,4 +0,0 @@
_:
{
}
hosts/kepler/config/gnupg.nix
-8
View File
@@ -1,8 +0,0 @@
_:
{
programs.gnupg.agent = {
enable = true;
enableSSHSupport = true;
};
}
hosts/kepler/config/home/home.nix
-10
View File
@@ -1,10 +0,0 @@
{ config, pkgs, ... }:
{
home = {
username = "user";
homeDirectory = "/home/user";
enableNixpkgsReleaseCheck = false;
stateVersion = "26.05";
};
}
hosts/kepler/config/jellyfin.nix
-9
View File
@@ -1,9 +0,0 @@
{ config, pkgs, ... }:
{
services = {
jellyfin = {
enable = true;
openFirewall = false;
};
};
}
hosts/kepler/config/networking.nix
-22
View File
@@ -1,22 +0,0 @@
_:
{
networking = {
hostName = "kepler";
hostId = "a984053d";
networkmanager = { enable = true; };
firewall = { enable = false; };
interfaces = {
eno1 = {
ipv4.addresses = [{
address = "10.11.0.10";
prefixLength = 24;
}];
};
};
defaultGateway = {
address = "10.11.0.1";
interface = "eno1";
};
};
}
hosts/kepler/config/pkgs.nix
-22
View File
@@ -1,22 +0,0 @@
{ pkgs, ... }:
{
environment.systemPackages = with pkgs; [
vim
wget
git
curl
fastfetch
net-tools
ethtool
dhcpcd
dig
usbutils
dhcpcd
host
dnslookup
drill
dig
tree
lsof
];
}
hosts/kepler/config/ssh.nix
-8
View File
@@ -1,8 +0,0 @@
_:
{
services = {
openssh = {
enable = true;
};
};
}
hosts/kepler/config/system.nix
-7
View File
@@ -1,7 +0,0 @@
_:
{
nix.settings.experimental-features = [ "nix-command" "flakes" ];
system = {
stateVersion = "26.05";
};
}
hosts/kepler/configuration.nix
-13
View File
@@ -1,13 +0,0 @@
{ config, lib, pkgs, ... }:
{
imports = [
./hardware-configuration.nix
./config/default.nix
../../config/default/default.nix
];
time.timeZone = "Europe/Berlin";
}
hosts/kepler/hardware-configuration.nix
-31
View File
@@ -1,31 +0,0 @@
{ config, lib, pkgs, modulesPath, ... }:
{
imports =
[ (modulesPath + "/installer/scan/not-detected.nix")
];
boot.initrd.availableKernelModules = [ "ehci_pci" "ahci" "mpt3sas" "usb_storage" "usbhid" "sd_mod" ];
boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ];
fileSystems."/" =
{ device = "rpool/root";
fsType = "zfs";
};
fileSystems."/boot" =
{ device = "/dev/disk/by-uuid/9B62-3696";
fsType = "vfat";
options = [ "fmask=0022" "dmask=0022" ];
};
fileSystems."/data/storage" = {
device = "data/storage";
fsType = "zfs";
};
swapDevices = [ ];
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}
hosts/voyager/config/boot.nix
-13
View File
@@ -1,13 +0,0 @@
_:
{
boot = {
loader = {
systemd-boot = {
enable = true;
};
efi = {
canTouchEfiVariables = true;
};
};
};
}
hosts/voyager/config/default.nix
-13
View File
@@ -1,13 +0,0 @@
{ config, pkgs, ... }:
{
imports = [
#./dhcp.nix
#./nat.nix
#./firewall.nix
./users.nix
./networking.nix
./time.nix
./system.nix
./boot.nix
];
}
hosts/voyager/config/dhcp.nix
View File
hosts/voyager/config/firewall.nix
View File
hosts/voyager/config/nat.nix
View File
hosts/voyager/config/networking.nix
-21
View File
@@ -1,21 +0,0 @@
_:
{
networking = {
hostName = "voyager";
networkmanager = { enable = true; };
firewall = { enable = false; };
interfaces = {
eno1 = {
ipv4.addresses = [{
address = "10.11.0.10";
prefixLength = 24;
}];
};
};
defaultGateway = {
address = "10.11.0.1";
interface = "eno1";
};
};
}
hosts/voyager/config/system.nix
-7
View File
@@ -1,7 +0,0 @@
_:
{
nix.settings.experimental-features = [ "nix-command" "flakes" ];
system = {
stateVersion = "26.05";
};
}
hosts/voyager/config/time.nix
-4
View File
@@ -1,4 +0,0 @@
_:
{
time.timeZone = "Europe/Berlin";
}
hosts/voyager/config/users.nix
-15
View File
@@ -1,15 +0,0 @@
_:
{
users.users.user = {
isNormalUser = true;
extraGroups = [ "wheel" "docker" "network" "plugdev" ];
openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDdCJK3NBMbGwvSxXq0kp/FzWUU0l0D1WX8f4vBubtZ7" ];
};
security = {
doas = {
enable = true;
extraConfig = "permit nopass keepenv :wheel";
};
};
}
hosts/voyager/configuration.nix
-11
View File
@@ -1,11 +0,0 @@
{ config, lib, pkgs, ... }:
{
imports = [
./hardware-configuration.nix
./config/default.nix
../../config/default/default.nix
];
}
hosts/voyager/hardware-configuration.nix
-28
View File
@@ -1,28 +0,0 @@
{ config, lib, pkgs, modulesPath, ... }:
{
imports =
[ (modulesPath + "/installer/scan/not-detected.nix")
];
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usb_storage" "sd_mod" ];
boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ];
fileSystems."/" =
{ device = "/dev/disk/by-uuid/dfbd029b-d568-41fc-93f3-43a6ac059661";
fsType = "ext4";
};
fileSystems."/boot" =
{ device = "/dev/disk/by-uuid/1942-B7E9";
fsType = "vfat";
options = [ "fmask=0022" "dmask=0022" ];
};
swapDevices = [ ];
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}