Lithospherical/nix-config
1
0
Fork 0
forked from jan-leila/nix-config
Code Pull requests Activity

added docker to defiant

Browse source
This commit is contained in:
Leyla Becker 2024-09-17 16:13:40 -05:00
parent 5d2b7a2ce5
commit f68a46c46a
4 changed files with 41 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

1
enviroments/common/default.nix
View file

@ -5,6 +5,7 @@
]; ];
nix.settings.experimental-features = [ "nix-command" "flakes" ]; nix.settings.experimental-features = [ "nix-command" "flakes" ];
nix.settings.trusted-users = [ "leyla" ];
# Enable networking # Enable networking
networking.networkmanager.enable = true; networking.networkmanager.enable = true;

48
hosts/defiant/configuration.nix
View file

@ -11,10 +11,6 @@
../../enviroments/server ../../enviroments/server
]; ];
# home.sessionVariables = {
# SOPS_AGE_KEY_FILE = "${config.home.homeDirectory}/.config/sops-nix/key.txt";
# };
users.leyla.isThinUser = true; users.leyla.isThinUser = true;
boot.loader.grub = { boot.loader.grub = {
@ -22,14 +18,11 @@
zfsSupport = true; zfsSupport = true;
efiSupport = true; efiSupport = true;
efiInstallAsRemovable = true; efiInstallAsRemovable = true;
# devices = [ "/dev/disk/by-path/pci-0000:23:00.3-usb-0:1:1.0-scsi-0:0:0:0-part2" ];
# mirroredBoots = [
# { devices = [ "/dev/disk/by-id/ata-ST18000NE000-3G6101_ZVTCXVEB-part1" ]; path = "/boot1"; efiSysMountPoint = "/boot"; }
# { devices = [ "/dev/disk/by-id/ata-ST18000NE000-3G6101_ZVTCXWSC-part1" ]; path = "/boot2"; efiSysMountPoint = "/boot2"; }
# { devices = [ "/dev/disk/by-id/ata-ST18000NE000-3G6101_ZVTD10EH-part1" ]; path = "/boot3"; efiSysMountPoint = "/boot3"; }
# ];
}; };
virtualisation.docker.enable = true;
users.extraGroups.docker.members = [ "leyla" ];
boot.supportedFilesystems = [ "zfs" ]; boot.supportedFilesystems = [ "zfs" ];
boot.zfs.extraPools = [ "zroot" ]; boot.zfs.extraPools = [ "zroot" ];
@ -72,6 +65,41 @@
}; };
}; };
fileSystems."/srv/nfs4/docker" = {
device = "/home/docker";
options = [ "bind" ];
};
fileSystems."/srv/nfs4/users" = {
device = "/home/users";
options = [ "bind" ];
};
fileSystems."/srv/nfs4/leyla" = {
device = "/home/leyla";
options = [ "bind" ];
};
fileSystems."/srv/nfs4/eve" = {
device = "/home/eve";
options = [ "bind" ];
};
services.nfs.server.enable = true;
services.nfs.server.exports = ''
/srv/nfs4/docker 192.168.1.0/24(rw,sync,crossmnt,no_subtree_check)
/srv/nfs4/leyla 192.168.1.0/22(rw,sync,no_subtree_check,nohide)
/srv/nfs4/eve 192.168.1.0/22(rw,sync,no_subtree_check,crossmnt)
/srv/nfs4/share 192.168.1.0/22(rw,sync,no_subtree_check,crossmnt)
# /export 192.168.1.10(rw,fsid=0,no_subtree_check) 192.168.1.15(rw,fsid=0,no_subtree_check)
# /export/kotomi 192.168.1.10(rw,nohide,insecure,no_subtree_check) 192.168.1.15(rw,nohide,insecure,no_subtree_check)
# /export/mafuyu 192.168.1.10(rw,nohide,insecure,no_subtree_check) 192.168.1.15(rw,nohide,insecure,no_subtree_check)
# /export/sen 192.168.1.10(rw,nohide,insecure,no_subtree_check) 192.168.1.15(rw,nohide,insecure,no_subtree_check)
# /export/tomoyo 192.168.1.10(rw,nohide,insecure,no_subtree_check) 192.168.1.15(rw,nohide,insecure,no_subtree_check)
'';
# This value determines the NixOS release from which the default # This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions # settings for stateful data, like file locations and database versions
# on your system were taken. It‘s perfectly fine and recommended to leave # on your system were taken. It‘s perfectly fine and recommended to leave

1
hosts/horizon/configuration.nix
View file

@ -23,6 +23,7 @@
setSocketVariable = true; setSocketVariable = true;
}; };
}; };
users.extraGroups.docker.members = [ "leyla" ];
# Enable touchpad support (enabled default in most desktopManager). # Enable touchpad support (enabled default in most desktopManager).
# services.xserver.libinput.enable = true; # services.xserver.libinput.enable = true;

2
users/leyla/default.nix
View file

@ -37,7 +37,7 @@ in
if (cfg.isFullUser || cfg.isThinUser) then { if (cfg.isFullUser || cfg.isThinUser) then {
isNormalUser = true; isNormalUser = true;
extraGroups = lib.mkMerge [ extraGroups = lib.mkMerge [
["networkmanager" "wheel" "docker" "users"] ["networkmanager" "wheel" "users"]
( (
lib.mkIf (!cfg.isThinUser) [ "adbusers" ] lib.mkIf (!cfg.isThinUser) [ "adbusers" ]
) )