VSinerva/nixos-conf
1
0
Fork 0
Code Activity Actions

Fix disko swap for cert-store

Browse source
This commit is contained in:
Vili Sinervä 2025-06-30 01:56:57 +03:00
parent e30c7efef6
commit 26eb1164d1
Signed by: Vili Sinervä
SSH key fingerprint: SHA256:FladqYjaE4scJY3Hi+gnShZ6ygnTJgixy0I6BAoHyos
12 changed files with 70 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.sops.yaml
View file

@ -2,7 +2,7 @@ keys:
- &vili-bw age1pvkuvcc38pke3euzsjzpgp6s6v3jykug2e69rplytdy7gxntm5jsraxhvp
- &helium age1xp02dggk2e6csvxg2q5nfts4tjhd05vthrcvvk2l67m3tgs3vugqshg24q
- &lithium age1yrfr0q72nqa842t0mzckeemfww28qzcd3wqmrd8mvzwvgpzssvlq9ruzlk
- &cert-store age1z66g62uxyhjvs44hu34zu7e8nx2r3ry7mrdeacx85g9jjhw9nquqy9esn7
- &cert-store age1hy7uunj0lnjv6uyqf7s5t5dnc8e0u48x30jva05sxykqtplqe44sf4acxc
- &cert-store-age age1cws8uzhg9qyxpjnw9w0mvalvqu3ttnnrn5r3eeczk4wcj86vnqgslzmzjp
- &ci age18k4drn9kuhu5qk8cqfd390nv9r0pq0qql6s76hkhzefxskwnscxsqm78q4
- &forgejo age1mfvue6vjj445dtly39k5vlcnhpfdf0ujumm6v8degk2lvaa9avcsl2eeg7

3
hosts/cert-store/configuration.nix
View file

@ -1,7 +1,6 @@
{ lib, ... }:
{ ... }:
{
environment.persistence."/persist".enable = true;
swapDevices = lib.mkForce [ ];
imports = [
../../shared/base.nix

7
hosts/ci/configuration.nix
View file

@ -1,5 +1,12 @@
{ ... }:
{
swapDevices = [
{
device = "/var/lib/swapfile";
size = 2 * 1024;
}
];
imports = [
../../shared/base.nix
../../shared/hardware/vm.nix

7
hosts/forgejo/configuration.nix
View file

@ -1,5 +1,12 @@
{ ... }:
{
swapDevices = [
{
device = "/var/lib/swapfile";
size = 2 * 1024;
}
];
imports = [
../../shared/base.nix
../../shared/hardware/vm.nix

7
hosts/gaming/configuration.nix
View file

@ -1,5 +1,12 @@
{ lib, ... }:
{
swapDevices = [
{
device = "/var/lib/swapfile";
size = 2 * 1024;
}
];
imports = [
../../shared/base.nix
../../shared/hardware/nvidia.nix

7
hosts/idacloud/configuration.nix
View file

@ -1,5 +1,12 @@
{ config, ... }:
{
swapDevices = [
{
device = "/var/lib/swapfile";
size = 2 * 1024;
}
];
custom.nextcloud_domain = "idacloud.sinerva.eu";
services.nextcloud.settings.trusted_domains = [ "idacloud.vsinerva.fi" ];
custom.collabora_domain = "idacollab.sinerva.eu";

7
hosts/nextcloud/configuration.nix
View file

@ -1,5 +1,12 @@
{ ... }:
{
swapDevices = [
{
device = "/var/lib/swapfile";
size = 2 * 1024;
}
];
custom.nextcloud_domain = "nextcloud.vsinerva.fi";
imports = [

7
hosts/syncthing/configuration.nix
View file

@ -1,5 +1,12 @@
{ lib, ... }:
{
swapDevices = [
{
device = "/var/lib/swapfile";
size = 2 * 1024;
}
];
imports = [
../../shared/base.nix
../../shared/hardware/vm.nix

7
hosts/vaultwarden/configuration.nix
View file

@ -1,5 +1,12 @@
{ ... }:
{
swapDevices = [
{
device = "/var/lib/swapfile";
size = 2 * 1024;
}
];
imports = [
../../shared/base.nix
../../shared/hardware/vm.nix

22
secrets/cert-store.yaml
View file

@ -5,20 +5,20 @@ sops:
- recipient: age1pvkuvcc38pke3euzsjzpgp6s6v3jykug2e69rplytdy7gxntm5jsraxhvp
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKczdMTHNtaDdCVG5XNWV3
SGhoYTRyNnh3TUJKYmhvTlh3dlU4SThjRmwwCjE0a1ltMEJ1UjdTaUhGVHc5cHhn
V1NZWko2Mm4wWnRmdFZ3TVdSNGVjd0kKLS0tIGhXN0NvKzFiS3llN3QwYjRCNU85
enVpUDZhNEd4OCsySDZnSmIrRGlNaW8KTDI/B+JR5FO3h1kjEzC7PGn0WCsFKO6F
Efgr1f5PdyaNZOGgnWm1GarH9WeFSPX57q+p+z6xU+DU7xv72oH6Uw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4RDIvZVNibVRQV24zNm9V
a1Q5SU5UakZ4eDA2RWQxbXduZ3JsMHUyNlhBCkYyUmpON0htZ3RyNWJXYUVHMWpv
NUd5ZVZmMzFMQk5PR3gzbEowUmV2Q1kKLS0tIEJIUDkraERVcG9SMWFUblhXam42
SHlycUJvd0RNNDNBY3REc2VhN0RpNlkKij54wD3j8yDeurHOTL9IwnkXiCqJMePK
PVxSF1VLLEUSiPaZpXKhUD4ghz/YwjBDsbVORh1btpol2LKq63ChUw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1z66g62uxyhjvs44hu34zu7e8nx2r3ry7mrdeacx85g9jjhw9nquqy9esn7
- recipient: age1hy7uunj0lnjv6uyqf7s5t5dnc8e0u48x30jva05sxykqtplqe44sf4acxc
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5MFcyWU1FTTBHa2YxeGVZ
NG93RVFCUVNpNWJQVVp5QXpUbzl0cFV5SDFRCjFiQjcrN0JkRTVNSFRtelVqa3g1
bnE2QldHeHV6Mm1UR01EcG16MXZzaVkKLS0tIDF5QkVhVVNIbllHSExXRVYzSW0y
dEw0eC9vQ09UYUxVYlByZ3U1MW5RQTAKjRYBemgMpjuO7kIgWWY/dIngE+oWJoaI
8WJ1n7QqrOo5Q3tBFcSbQc0dR5AGSo5itZzPBsDjS7e4fIz3DrPJOQ==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZcFVNTGhBcDhEZW9DVHFW
Y3hhSWo4V3JKbmFnelZZUnFWcGNQM29rS2lFClBLUlArUGcxb2kvR3dEaVJoR0pS
cWpvME10M01BNENXQWtjcWdPYU5PVEUKLS0tIDYrUTAvT21CQ1d1REFsUlFINi9m
WmVyUDFxNEhhZEhhcTg2QmlacjZGY2MKn3fLG9OMtKmZ71PXJLqpEonlWHNd5zTR
cwvrSNArR5neDMdlVQlh9pHweSWQKP6MQ5ilbTnH5ksoTP+Or36aBQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-22T21:06:19Z"
mac: ENC[AES256_GCM,data:721h9RrvnmUmIIpp02tLqlkF0Nx4Fmy36pMagqg9wo7xP8gtauEwE8FYOQWsrqo6vJTv1G+nzMRoorRrRodPuvYHBzxvxgNVacU4bzD5zN9v+wz/HEgbB+YIDKeOAY3/8Sjf5BrZdaN/75GNJUtYX8EVpUy9m9Y/WqtP3OWHTsA=,iv:jYXah33gFURc0+AbaHoBpsoWhBNJaBkie7Hc8Gz8qco=,tag:j96I6pH4xSUhocEpEr586Q==,type:str]

8
shared/disko/zfs-impermanence.nix
View file

@ -18,6 +18,14 @@
mountOptions = [ "umask=0077" ];
};
};
swap = {
size = "2G";
content = {
type = "swap";
discardPolicy = "both";
randomEncryption = true;
};
};
zfs = {
size = "100%";
content = {

7
shared/hardware/vm.nix
View file

@ -1,12 +1,5 @@
{ lib, modulesPath, ... }:
{
swapDevices = [
{
device = "/var/lib/swapfile";
size = 2 * 1024;
}
];
services.qemuGuest.enable = true;
imports = [