Stuff and things
This commit is contained in:
parent
dd1cf0685a
commit
5ef9bfb602
3 changed files with 39 additions and 13 deletions
|
@ -8,6 +8,7 @@
|
|||
programs.fish = {
|
||||
shellAliases = {
|
||||
# TODO: these aren't working?
|
||||
disks = "df -h && lsblk";
|
||||
sctl = "sudo systemctl";
|
||||
bt = "bluetoothctl";
|
||||
pa = "pulsemixer";
|
||||
|
|
|
@ -608,7 +608,7 @@ sudo nix run nixpkgs#ipmitool -- raw 0x30 0x30 0x02 0xff 0x00
|
|||
# clickhouse and plausible analytics once they're up and running?
|
||||
services.restic.backups = let
|
||||
defaults = {
|
||||
passwordFile = "/root/restic-localbackup-password";
|
||||
passwordFile = "/root/restic-remotebackup-password";
|
||||
paths = [
|
||||
"/storage/files.lyte.dev"
|
||||
"/storage/daniel"
|
||||
|
@ -631,6 +631,7 @@ sudo nix run nixpkgs#ipmitool -- raw 0x30 0x30 0x02 0xff 0x00
|
|||
local =
|
||||
defaults
|
||||
// {
|
||||
passwordFile = "/root/restic-localbackup-password";
|
||||
repository = "/storage/backups/local";
|
||||
};
|
||||
rascal =
|
||||
|
@ -878,7 +879,7 @@ sudo nix run nixpkgs#ipmitool -- raw 0x30 0x30 0x02 0xff 0x00
|
|||
"d /storage/dawncraft/downloads/ 0770 1000 1000 -"
|
||||
];
|
||||
virtualisation.oci-containers.containers.minecraft-dawncraft = {
|
||||
autoStart = true;
|
||||
autoStart = false;
|
||||
|
||||
# sending commands: https://docker-minecraft-server.readthedocs.io/en/latest/commands/
|
||||
image = "docker.io/itzg/minecraft-server";
|
||||
|
|
|
@ -1,6 +1,5 @@
|
|||
{
|
||||
inputs,
|
||||
# outputs,
|
||||
config,
|
||||
modulesPath,
|
||||
...
|
||||
|
@ -18,24 +17,49 @@
|
|||
fsType = "f2fs";
|
||||
};
|
||||
|
||||
fileSystems."/storage" = {
|
||||
device = "/dev/disk/by-uuid/410fa651-4918-447c-9337-97cc12ff6d2a";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
boot.loader.grub = {
|
||||
enable = true;
|
||||
device = "/dev/sda";
|
||||
};
|
||||
|
||||
users.users = {
|
||||
beefcake = {
|
||||
# used for restic backups
|
||||
isNormalUser = true;
|
||||
openssh.authorizedKeys.keys =
|
||||
config.users.users.daniel.openssh.authorizedKeys.keys
|
||||
++ [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK7HrojwoyHED+A/FzRjYmIL0hzofwBd9IYHH6yV0oPO root@beefcake"
|
||||
];
|
||||
};
|
||||
|
||||
daniel = {
|
||||
# used for restic backups
|
||||
isNormalUser = true;
|
||||
extraGroups = ["users" "wheel" "video" "dialout" "uucp"];
|
||||
openssh.authorizedKeys.keys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAPLXOjupz3ScYjgrF+ehrbp9OvGAWQLI6fplX6w9Ijb daniel@lyte.dev"
|
||||
];
|
||||
};
|
||||
|
||||
root = {
|
||||
openssh.authorizedKeys.keys = config.users.users.daniel.openssh.authorizedKeys.keys;
|
||||
};
|
||||
};
|
||||
|
||||
networking = {
|
||||
hostName = "rascal";
|
||||
networkmanager.enable = true;
|
||||
};
|
||||
|
||||
users.users.beefcake = {
|
||||
# used for restic backups
|
||||
isNormalUser = true;
|
||||
openssh.authorizedKeys.keys =
|
||||
config.users.users.daniel.openssh.authorizedKeys.keys
|
||||
++ [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK7HrojwoyHED+A/FzRjYmIL0hzofwBd9IYHH6yV0oPO root@beefcake"
|
||||
];
|
||||
firewall = {
|
||||
enable = true;
|
||||
allowPing = true;
|
||||
allowedTCPPorts = [22];
|
||||
};
|
||||
};
|
||||
|
||||
system.stateVersion = "22.05";
|
||||
|
|
Loading…
Reference in a new issue