114 lines
2.8 KiB
Nix
114 lines
2.8 KiB
Nix
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||
# and may be overwritten by future invocations. Please make changes
|
||
# to /etc/nixos/configuration.nix instead.
|
||
{
|
||
config,
|
||
lib,
|
||
pkgs,
|
||
...
|
||
}: {
|
||
boot.initrd.availableKernelModules = ["ehci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod"];
|
||
boot.initrd.kernelModules = ["raid1"];
|
||
boot.kernelModules = ["kvm-intel"];
|
||
boot.extraModulePackages = [];
|
||
boot.extraModprobeConfig = "options kvm_intel nested=1";
|
||
|
||
boot.initrd.luks.forceLuksSupportInInitrd = true;
|
||
|
||
boot.kernelPackages = pkgs.linuxPackages_latest;
|
||
|
||
boot.loader.grub.enable = true;
|
||
boot.loader.grub.device = "/dev/disk/by-id/usb-SanDisk_Cruzer_Blade_03025429121421051300-0:0";
|
||
|
||
boot.initrd.luks.devices."cryptroot" = {
|
||
device = "/dev/disk/by-uuid/9e13c8ea-96d3-45b1-85f4-d1a61233da6f";
|
||
#keyFile = "/dev/disk/by-id/usb-SanDisk_Cruzer_Blade_04020116120721075123-0:0-part1";
|
||
#fallbackToPassword = true;
|
||
#bypassWorkqueues = true;
|
||
};
|
||
|
||
boot.initrd.network = {
|
||
enable = true;
|
||
ssh = {
|
||
enable = true;
|
||
port = 22;
|
||
authorizedKeys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAqkqMYgncrnczcW/0PY+Z+FmNXXpgw6D9JWTTwiainy hensoko@hensoko-tp-work"];
|
||
hostKeys = [/etc/secrets/initrd/ssh_host_ed25519_key];
|
||
};
|
||
postCommands = ''
|
||
echo 'cryptsetup-askpass' >> /root/.profile
|
||
'';
|
||
};
|
||
|
||
boot.initrd.systemd.enable = true;
|
||
|
||
boot.initrd.services.swraid = {
|
||
enable = true;
|
||
mdadmConf = ''
|
||
ARRAY /dev/md/0 metadata=1.2 name=data:0 UUID=1156202f:835af09b:2e05e02a:a1869d1c
|
||
'';
|
||
};
|
||
|
||
fileSystems."/" = {
|
||
device = "/dev/disk/by-label/root";
|
||
fsType = "ext4";
|
||
};
|
||
|
||
fileSystems."/boot" = {
|
||
device = "/dev/disk/by-label/boot";
|
||
fsType = "ext4";
|
||
};
|
||
|
||
fileSystems."/mnt/internal" = {
|
||
device = "/dev/disk/by-uuid/3563f624-f8ed-4664-95d0-ca8b9db1c60a";
|
||
fsType = "ext4";
|
||
};
|
||
|
||
swapDevices = [
|
||
{device = "/dev/disk/by-label/swap";}
|
||
];
|
||
|
||
networking.bonds."bond0" = {
|
||
interfaces = ["eno1" "eno2"];
|
||
driverOptions = {
|
||
miimon = "100";
|
||
mode = "balance-xor";
|
||
xmit_hash_policy = "layer3+4";
|
||
};
|
||
};
|
||
|
||
networking = {
|
||
defaultGateway = {
|
||
address = "80.244.242.1";
|
||
interface = "br0";
|
||
};
|
||
|
||
defaultGateway6 = {
|
||
address = "2001:4d88:1ffa:26::1";
|
||
interface = "br0";
|
||
};
|
||
|
||
nameservers = ["95.129.51.51" "80.244.244.244"];
|
||
|
||
bridges."br0".interfaces = ["bond0"];
|
||
|
||
interfaces."br0" = {
|
||
ipv4.addresses = [
|
||
{
|
||
address = "80.244.242.2";
|
||
prefixLength = 29;
|
||
}
|
||
];
|
||
ipv6.addresses = [
|
||
{
|
||
address = "2001:4d88:1ffa:26::2";
|
||
prefixLength = 64;
|
||
}
|
||
];
|
||
};
|
||
};
|
||
|
||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||
}
|