summaryrefslogtreecommitdiff
path: root/hosts/apocalypse
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--hosts/apocalypse/backup.nix (renamed from nixos/hosts/apocalypse/backup.nix)6
-rw-r--r--hosts/apocalypse/default.nix (renamed from nixos/hosts/apocalypse/default.nix)21
-rw-r--r--hosts/apocalypse/firewall.nix (renamed from nixos/hosts/apocalypse/firewall.nix)0
-rw-r--r--hosts/apocalypse/hardware-configuration.nix (renamed from nixos/hosts/apocalypse/hardware-configuration.nix)0
-rw-r--r--hosts/apocalypse/nvidia.nix (renamed from nixos/hosts/apocalypse/nvidia.nix)0
5 files changed, 21 insertions, 6 deletions
diff --git a/nixos/hosts/apocalypse/backup.nix b/hosts/apocalypse/backup.nix
index 07386be..3529024 100644
--- a/nixos/hosts/apocalypse/backup.nix
+++ b/hosts/apocalypse/backup.nix
@@ -10,6 +10,10 @@
instances."remote_vault" = {
onCalendar = "weekly";
settings = {
+ snapshot_preserve_min = "1w";
+ snapshot_preserve = "2w";
+ target_preserve_min = "1w";
+ target_preserve = "4w";
ssh_identity = "/etc/vault_key"; # NOTE: must be readable by user/group btrbk
ssh_user = "vaultmanager";
stream_compress = "lz4";
@@ -17,7 +21,7 @@
target = "ssh://10.127.9.1/vault/backups/apocalypse";
subvolume = {
"@root" = {
- snapshot_create = "always";
+ snapshot_create = "ondemand";
};
};
};
diff --git a/nixos/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix
index e57105c..8993dc2 100644
--- a/nixos/hosts/apocalypse/default.nix
+++ b/hosts/apocalypse/default.nix
@@ -1,12 +1,24 @@
- {pkgs, config, lib, ...}:
+ {lib, ...}:
{
imports = [
./hardware-configuration.nix
- ../../common
./nvidia.nix
./backup.nix
./firewall.nix
];
+
+ ## Addons for this system
+ addons = {
+ desktop.hyprland.enable = true;
+ desktop.xfce.enable = true;
+
+ virtualisation.guest = false;
+ virtualisation.host = true;
+
+ vpn.mullvad.enable = true;
+ gpg.enable = true;
+ };
+
boot.loader.grub = {
useOSProber = true;
device = "nodev";
@@ -18,7 +30,7 @@
};
boot.loader.efi.canTouchEfiVariables = true;
boot.initrd.systemd.enable = true;
- boot.crashDump.enable = false;
+ boot.crashDump.enable = true;
boot.plymouth = {
enable = true;
theme = "bgrt";
@@ -47,7 +59,7 @@
programs.nix-ld.enable = true;
services.printing.enable = true;
- nixpkgs.config.allowUnfree = true;
+ # nix.config.allowUnfree = true;
services.resolved = {
@@ -58,7 +70,6 @@
dnsovertls = "opportunistic";
};
-
networking.useDHCP = lib.mkDefault true;
networking.firewall.checkReversePath = false;
diff --git a/nixos/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix
index 5c73966..5c73966 100644
--- a/nixos/hosts/apocalypse/firewall.nix
+++ b/hosts/apocalypse/firewall.nix
diff --git a/nixos/hosts/apocalypse/hardware-configuration.nix b/hosts/apocalypse/hardware-configuration.nix
index d8ae434..d8ae434 100644
--- a/nixos/hosts/apocalypse/hardware-configuration.nix
+++ b/hosts/apocalypse/hardware-configuration.nix
diff --git a/nixos/hosts/apocalypse/nvidia.nix b/hosts/apocalypse/nvidia.nix
index ef95b43..ef95b43 100644
--- a/nixos/hosts/apocalypse/nvidia.nix
+++ b/hosts/apocalypse/nvidia.nix