nixos-conf/machine-confs/helium.nix

72 lines
2.1 KiB
Nix

{ pkgs, lib, ... }:
{
custom.home_wg_suffix = "2";
system.autoUpgrade.allowReboot = lib.mkForce false;
networking = {
hostName = "helium";
wg-quick.interfaces = {
wg1 = {
autostart = false;
address = [ "10.100.0.7/24" ];
dns = [ "1.1.1.1" ];
privateKeyFile = "/root/wireguard-keys/privatekey-netflix";
listenPort = 51820;
peers = [
{
publicKey = "XSYHg0utIR1j7kRsWFwuWNo4RPD47KP53cVa6qDPtRE=";
allowedIPs = [
"0.0.0.0/0"
"192.168.0.0/24"
];
endpoint = "netflix.vsinerva.fi:51821";
}
];
};
};
};
services.xserver.displayManager.setupCommands = ''
${pkgs.xorg.xrandr}/bin/xrandr --output DisplayPort-0 --auto --pos 0x0 --primary --output eDP --auto --pos 3840x360
'';
boot = {
loader.timeout = 3;
initrd.luks = {
fido2Support = true;
devices."luks-f6e1979b-0dee-4ee9-8170-10490019854b".fido2 = {
passwordLess = true;
credential = "df9233221fa09173fea61d8b8516d184f8ede475024a88201b34d838ecf306ee070052dae2262619c1da2be7562ec9dd94888c71a9326fea70dfe16214b5ea8ec014d86afa01";
};
};
resumeDevice = "/dev/mapper/luks-f6e1979b-0dee-4ee9-8170-10490019854b";
kernelParams = [ "resume_offset=44537856" ];
};
imports = [
../shared/base.nix
../personal-machines/desktop.nix
../personal-machines/development.nix
../personal-machines/hardware/amd-laptop.nix
../personal-machines/hardware/hibernate.nix
../personal-machines/hardware/keychron-q11.nix
../personal-machines/hardware/onlykey.nix
../personal-machines/hardware/trackball.nix
../personal-machines/networking/home-wg.nix
../personal-machines/networking/printing.nix
../personal-machines/programs/bitwarden.nix
../personal-machines/programs/communication.nix
../personal-machines/programs/firefox.nix
../personal-machines/programs/i3.nix
../personal-machines/programs/moonlight.nix
../personal-machines/programs/redshift.nix
../personal-machines/programs/study.nix
../personal-machines/programs/usb-automount.nix
];
}