123

2026-06-11 12:40:44 +03:00 · 2025-08-07 00:54:22 +03:00
parent da242bb982
commit b52f06e37a
14 changed files with 1273 additions and 5 deletions
@@ -0,0 +1,163 @@
+{ inputs, ... }@flakeContext:
+let
+  nixosModule =
+    {
+      config,
+      lib,
+      modulesPath,
+      pkgs,
+      ...
+    }:
+    {
+      xlib.device = {
+        type = "vds";
+        hostname = "otreca";
+      };
+
+      imports =
+        with inputs;
+        [
+          (modulesPath + "/installer/scan/not-detected.nix")
+          (modulesPath + "/profiles/qemu-guest.nix")
+
+          ./disko/vds.nix
+          ./hardware/vds.nix
+          disko.nixosModules.disko
+
+          self.nixosModules.default
+          self.homeConfigurations.default.nixosModule
+        ]
+        ++ builtins.attrValues inputs.self.nixosModules.vds;
+
+      home-manager = {
+        extraSpecialArgs = {
+          xlib = config.xlib;
+        };
+      };
+
+      boot = {
+        kernelPackages = pkgs.linuxPackages_xanmod_stable;
+        hardwareScan = true;
+        loader = {
+          grub = {
+            enable = true;
+            device = "nodev";
+            useOSProber = false;
+            efiSupport = false;
+          };
+          systemd-boot.enable = lib.mkDefault false;
+        };
+      };
+
+      users = {
+        users = {
+          root = {
+            openssh.authorizedKeys.keys = [
+              "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKduJia+unaQQdN6X5syaHvnpIutO+yZwvfiCP4qKQ/P"
+            ];
+          };
+          "${config.xlib.device.username}" = {
+            openssh.authorizedKeys.keys = [
+              "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKduJia+unaQQdN6X5syaHvnpIutO+yZwvfiCP4qKQ/P"
+            ];
+          };
+        };
+      };
+
+      services = {
+        earlyoom.enable = true;
+        preload.enable = true;
+        journald = {
+          extraConfig = ''
+            SystemMaxUse=512M
+          '';
+        };
+        samba = {
+          enable = true;
+          openFirewall = true;
+          settings = {
+            global = {
+              "invalid users" = [ ];
+              "passwd program" = "/run/wrappers/bin/passwd %u";
+              security = "user";
+            };
+            nixos = {
+              "path" = "/etc/nixos";
+              "browseable" = "yes";
+              "read only" = "no";
+              "valid users" = "${config.xlib.device.username}";
+              "guest ok" = "no";
+              "writable" = "yes";
+              "create mask" = 755;
+              "directory mask" = 755;
+              "force user" = "${config.xlib.device.username}";
+              "force group" = "users";
+            };
+            root = {
+              "path" = "/";
+              "browseable" = "yes";
+              "read only" = "no";
+              "valid users" = "${config.xlib.device.username}";
+              "guest ok" = "no";
+              "writable" = "yes";
+              #"create mask" = 0644;
+              #"directory mask" = 0644;
+              "force user" = "root";
+              "force group" = "root";
+            };
+            "${config.xlib.device.username}" = {
+              "path" = "/home/${config.xlib.device.username}";
+              "browseable" = "yes";
+              "read only" = "no";
+              "valid users" = "${config.xlib.device.username}";
+              "guest ok" = "no";
+              "writable" = "yes";
+              "create mask" = 700;
+              "directory mask" = 700;
+              "force user" = "${config.xlib.device.username}";
+              "force group" = "users";
+            };
+          };
+        };
+        openssh = {
+          enable = true;
+          allowSFTP = true;
+          openFirewall = true;
+          hostKeys = [
+            {
+              path = "/etc/ssh/id_ed25519";
+              type = "ed25519";
+            }
+          ];
+          settings = {
+            PasswordAuthentication = false;
+            PermitRootLogin = "yes";
+            UsePAM = true;
+          };
+        };
+        tailscale = {
+          enable = true;
+          openFirewall = true;
+        };
+      };
+
+      networking = {
+        hostName = "${config.xlib.device.hostname}";
+        networkmanager.enable = true;
+        firewall.enable = true;
+      };
+
+      system = {
+        stateVersion = "25.05";
+      };
+    };
+in
+inputs.nixpkgs.lib.nixosSystem {
+  modules = with inputs; [
+    nixosModule
+  ];
+  system = "x86_64-linux";
+  specialArgs = {
+    deviceType = "vds";
+  };
+}