aboutsummaryrefslogtreecommitdiff
path: root/nixos/configurations/dean.nix
blob: a1ec7885a9667e60c3d0bd938ffcd2fcb897849d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
{
  lib,
  pkgs,
  ...
}: {
  system.stateVersion = "24.05";
  turris.board = "mox";
  deploy = {
    enable = true;
    configurationLimit = 8;
  };

  cynerd = {
    devmin = true;
    wireguard = true;
    monitoring = {
      speedtest = true;
      drives = false;
    };
  };

  boot.initrd.availableKernelModules = ["dm-mod"];

  hardware.enableAllFirmware = false; # No wifi so we do not need firmwares
  services = {
    journald.settings.Journal = {
      SystemMaxUse = "512M";
    };

    btrfs.autoScrub = {
      enable = true;
      fileSystems = ["/"];
    };
  };

  networking = {
    useNetworkd = true;
    useDHCP = false;
  };
  systemd.network = {
    netdevs."brlab".netdevConfig = {
      Kind = "bridge";
      Name = "brlan";
    };
    networks = {
      "brlan" = {
        matchConfig.Name = "brlan";
        networkConfig = {
          DHCP = "yes";
          IPv6AcceptRA = "yes";
        };
      };
      "lan-brlan" = {
        matchConfig.Name = "lan* end0";
        networkConfig.Bridge = "brlan";
      };
    };
    # TODO investigate why it doesn't work
    wait-online.enable = false;
  };

  environment.systemPackages = with pkgs; [
    #openocd
    tio
    gnupg
  ];

  programs = {
    fuse = {
      enable = true;
      userAllowOther = true;
    };
    nix-ld.enable = true;
  };
  boot.binfmt = {
    emulatedSystems = ["x86_64-linux"];
  };
  environment.sessionVariables = {
    NIX_LD_x86_64_linux = "${pkgs.buildPackages.glibc}/lib/ld-linux-x86-64.so.2";
    NIX_LD_LIBRARY_PATH_x86_64_linux = lib.makeLibraryPath (with pkgs.buildPackages; [
      stdenv.cc.cc
      glibc
      zlib
    ]);
  };
  systemd.tmpfiles.rules = [
    "d /lib64 0755 root root -"
    "L+ /lib64/ld-linux-x86-64.so.2 - - - - ${pkgs.buildPackages.nix-ld}/libexec/nix-ld"
  ];
}