rc/hosts/glyph/default.nix at main · stackptr/rc · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
{config, ...}: {
  imports = [
    ./hardware.nix
    ./services
  ];

  boot.supportedFilesystems = ["ext4" "zfs"];
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  boot.zfs.forceImportRoot = false;

  fileSystems."/mnt/media" = {
    device = "zdata/media";
    fsType = "zfs";
  };
  fileSystems."/mnt/archive" = {
    device = "zdata/archive";
    fsType = "zfs";
  };
  fileSystems."/mnt/torrents" = {
    device = "zdata/torrents";
    fsType = "zfs";
  };
  fileSystems."/mnt/unsorted" = {
    device = "zdata/unsorted";
    fsType = "zfs";
  };
  fileSystems."/mnt/backup" = {
    device = "zdata/backup";
    fsType = "zfs";
  };

  networking.hostName = "glyph";
  networking.hostId = "e7bdc076"; # Ensure correct ZFS pool imported
  networking.firewall = {
    enable = true;
    trustedInterfaces = ["tailscale0"];
  };

  systemd.network.networks."10-wan" = {
    matchConfig.Name = "enp5s0";
    cakeConfig = {
      Parent = "root";
      Bandwidth = "900M";
      RTTSec = "10ms";
      FlowIsolation = "triple-isolate";
      Preset = "diffserv3";
    };
  };

  time.timeZone = "America/Los_Angeles";
  i18n.defaultLocale = "en_US.UTF-8";

  # Beets library database (beets configured in home-manager)
  rc.backup.paths = ["/home/mu/.config/beets/library.db"];

  age.secrets.user-password.file = ./secrets/user-password.age;

  users.users.mu.hashedPasswordFile = config.age.secrets.user-password.path;

  system.stateVersion = "24.05";
}