+10

flake.nix

··· 50 50 ]; 51 51 }; 52 52 53 53 + nixosConfigurations.devins-5495 = inputs.nixpkgs.lib.nixosSystem { 54 54 + specialArgs = inputs; 55 55 + modules = [ 56 56 + ./modules/common 57 57 + ./modules/nixos 58 58 + ./hosts/devins-5495 59 59 + inputs.home-manager.nixosModules.home-manager 60 60 + ]; 61 61 + }; 62 62 + 53 63 formatter = { 54 64 aarch64-darwin = inputs.nixpkgs.legacyPackages.aarch64-darwin.alejandra; 55 65 x86_64-linux = inputs.nixpkgs.legacyPackages.x86_64-linux.alejandra;

+19

hosts/devins-5495/default.nix

··· 1 1 + { config, pkgs, ... }: 2 2 + 3 3 + { 4 4 + imports = 5 5 + [ 6 6 + ./hardware.nix 7 7 + ./services/fwupd.nix 8 8 + ./services/ssh.nix 9 9 + ./services/tailscale.nix 10 10 + ]; 11 11 + 12 12 + boot.loader.systemd-boot.enable = true; 13 13 + boot.loader.efi.canTouchEfiVariables = true; 14 14 + 15 15 + networking.hostName = "devins-5495"; 16 16 + networking.networkmanager.enable = true; 17 17 + 18 18 + system.stateVersion = "25.11"; 19 19 + }

+31

hosts/devins-5495/hardware.nix

··· 1 1 + # Do not modify this file! It was generated by ‘nixos-generate-config’ 2 2 + # and may be overwritten by future invocations. Please make changes 3 3 + # to /etc/nixos/configuration.nix instead. 4 4 + { config, lib, pkgs, modulesPath, ... }: 5 5 + 6 6 + { 7 7 + imports = 8 8 + [ (modulesPath + "/installer/scan/not-detected.nix") 9 9 + ]; 10 10 + 11 11 + boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "sd_mod" "rtsx_pci_sdmmc" ]; 12 12 + boot.initrd.kernelModules = [ ]; 13 13 + boot.kernelModules = [ "kvm-amd" ]; 14 14 + boot.extraModulePackages = [ ]; 15 15 + 16 16 + fileSystems."/" = 17 17 + { device = "/dev/disk/by-uuid/b8e42c06-fd74-480f-bf5e-f67c05383227"; 18 18 + fsType = "ext4"; 19 19 + }; 20 20 + 21 21 + fileSystems."/boot" = 22 22 + { device = "/dev/disk/by-uuid/83CD-DDA0"; 23 23 + fsType = "vfat"; 24 24 + options = [ "fmask=0077" "dmask=0077" ]; 25 25 + }; 26 26 + 27 27 + swapDevices = [ ]; 28 28 + 29 29 + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; 30 30 + hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; 31 31 + }

+3

hosts/devins-5495/services/fwupd.nix

··· 1 1 + {...}: { 2 2 + services.fwupd.enable = true; 3 3 + }

+10

hosts/devins-5495/services/ssh.nix

··· 1 1 + {...}: { 2 2 + services = { 3 3 + openssh = { 4 4 + enable = true; 5 5 + settings.PasswordAuthentication = false; 6 6 + }; 7 7 + 8 8 + fail2ban.enable = true; 9 9 + }; 10 10 + }

+3

hosts/devins-5495/services/tailscale.nix

··· 1 1 + {...}: { 2 2 + services.tailscale.enable = true; 3 3 + }