67 lines
1.6 KiB
Nix
67 lines
1.6 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with import <stockholm/lib>;
|
|
|
|
{
|
|
krebs.build.host = config.krebs.hosts.zu;
|
|
|
|
imports = [
|
|
<stockholm/tv>
|
|
<stockholm/tv/2configs/hw/x220.nix>
|
|
<stockholm/tv/2configs/exim-retiolum.nix>
|
|
<stockholm/tv/2configs/gitrepos.nix>
|
|
<stockholm/tv/2configs/mail-client.nix>
|
|
<stockholm/tv/2configs/man.nix>
|
|
<stockholm/tv/2configs/nginx/public_html.nix>
|
|
<stockholm/tv/2configs/pulse.nix>
|
|
<stockholm/tv/2configs/retiolum.nix>
|
|
<stockholm/tv/2configs/xserver>
|
|
];
|
|
|
|
boot.initrd.luks = {
|
|
cryptoModules = [ "aes" "sha512" "xts" ];
|
|
devices = [
|
|
{ name = "zuca"; device = "/dev/sda2"; }
|
|
];
|
|
};
|
|
|
|
fileSystems = {
|
|
"/" = {
|
|
device = "/dev/mapper/zuvga-root";
|
|
fsType = "btrfs";
|
|
options = ["defaults" "noatime" "ssd" "compress=lzo"];
|
|
};
|
|
"/home" = {
|
|
device = "/dev/mapper/zuvga-home";
|
|
fsType = "btrfs";
|
|
options = ["defaults" "noatime" "ssd" "compress=lzo"];
|
|
};
|
|
"/boot" = {
|
|
device = "/dev/sda1";
|
|
};
|
|
"/tmp" = {
|
|
device = "tmpfs";
|
|
fsType = "tmpfs";
|
|
options = ["nosuid" "nodev" "noatime"];
|
|
};
|
|
};
|
|
|
|
security.wrappers = {
|
|
sendmail.source = "${pkgs.exim}/bin/sendmail"; # for cron
|
|
};
|
|
|
|
services.printing.enable = true;
|
|
|
|
# see tmpfiles.d(5)
|
|
systemd.tmpfiles.rules = [
|
|
"d /tmp 1777 root root - -" # does this work with mounted /tmp?
|
|
];
|
|
|
|
#services.bitlbee.enable = true;
|
|
#services.tor.client.enable = true;
|
|
#services.tor.enable = true;
|
|
|
|
# The NixOS release to be compatible with for stateful data such as databases.
|
|
system.stateVersion = "15.09";
|
|
}
|