Initial commit

crows_nest/configuration.nix

@@ -0,0 +1,139 @@
+{ config, pkgs, modulesPath, lib, system, ... }:
+
+{
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+    (modulesPath + "/profiles/minimal.nix")
+    # If for some reason "minimal" fails...
+    #(modulesPath + "/profiles/base.nix")
+    ../virtualization/podman-utils.nix
+    ../virtualization/nebula-sync-oci.nix
+  ];
+
+  config = {
+    boot.kernelPackages = pkgs.linuxPackages_latest;
+    
+    # Use the boot drive for grub
+    boot.loader.grub.enable = lib.mkDefault true;
+    boot.loader.grub.devices = [ "nodev" ];
+    
+    boot.growPartition = lib.mkDefault true;
+    
+    # Workaround for busted ZFS kernels
+    boot.supportedFilesystems = {
+      zfs = lib.mkForce false;
+    };
+
+    # Allow remote updates with flakes and non-root users
+    nix.settings.trusted-users = [ "root" "@wheel" ];
+    nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+    # Provide a default hostname
+    networking.hostName = lib.mkDefault "crowsnest";
+    
+    # Activate firewall
+    networking.firewall.enable = true;
+    
+    # Open firewall ports for Portainer
+    networking.firewall.allowedTCPPorts = [80 443 2112 8000];
+
+    # Time Zone
+    time.timeZone = "America/Chicago";
+
+    # Enable QEMU Guest for Proxmox
+    services.qemuGuest.enable = lib.mkDefault true;
+    
+    #OpenSSH
+    security.sudo.wheelNeedsPassword = false; # Don't ask for passwords
+    services.openssh = {
+      enable = true;
+      settings.PasswordAuthentication = false;
+      settings.KbdInteractiveAuthentication = false;
+      ports = [ 2112 ];
+    };
+    programs.ssh.startAgent = true;
+    
+    #SOPS
+    sops.defaultSopsFile = ../secrets/secrets.yaml;
+    sops.defaultSopsFormat = "yaml";
+    sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+     # sops.secrets."nebula-sync-primary" = {
+       # owner = "nebula";
+     # };
+     # sops.secrets."nebula-sync-replicas" = {
+       # owner = "nebula";
+     # };
+    #sops.age.keyFile = "/home/shawnb/Development/falcon_nest/sops/age/keys.txt";
+    #sops.secrets."nebula-sync" = {
+    #  owner = config.users.users.nebula.name;
+    #};
+
+    # Some sane packages we need on every system
+    environment.systemPackages = with pkgs; [
+      vim # for emergencies
+      git # for pulling nix flakes
+      zsh
+      bat
+      eza
+      podman-tui
+    ];
+
+    environment.shells = with pkgs; [ zsh ];
+    users.defaultUserShell = pkgs.zsh;
+    
+    programs.zsh = {
+      shellAliases = {
+        #.. = "cd ..";
+        h = "cd ~";
+        ls = "eza --icons -l -T -L=1";
+        cat = "bat";
+      };
+      enable = lib.mkDefault true;
+      autosuggestions.enable = lib.mkDefault true;
+    };
+    
+    #oh-my-zsh
+    programs.zsh.ohMyZsh = {
+      enable = lib.mkDefault true;
+      theme = lib.mkDefault "jtriley";
+    };
+
+    # Default filesystem
+    fileSystems."/" = lib.mkDefault {
+      device = "/dev/disk/by-label/nixos";
+      autoResize = true;
+      fsType = "ext4";
+    };
+    
+    fileSystems."/mnt/gitlab" = {
+      device = "//10.0.0.49/Gitlab";
+      fsType = "cifs";
+      # options = [ "username=eddie" "password=yoursambapassword" "x-systemd.automount" "noauto" ];
+      options = [ "x-systemd.automount" "noauto" ];
+    }
+
+    nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+    system.stateVersion = lib.mkDefault "25.05";
+    
+    # Let the VM take care of its own upgrades.
+    system.autoUpgrade.enable = true;
+    
+    # Clean Nix up after upgrades.
+    programs.nh = {
+      enable = true;
+      clean.enable = true;
+      clean.extraArgs = "--keep 5";
+    };
+
+    # Add an admin user
+    users.users.shawnb = lib.mkDefault {
+      isNormalUser = true;
+      hashedPassword = "";
+      description = "Shawn Borton";
+      extraGroups = [ "networkmanager" "wheel" ];
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILgyiCfvu21kVTfRyKjzpH+93k7Jsf+EqLfN6NtolHnf tech@shilohsvillage.com"
+      ];
+    };
+  };
+}

crows_nest/configuration.nix.bak

@@ -0,0 +1,104 @@
+{ config, pkgs, modulesPath, lib, system, ... }:
+
+{
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+    (modulesPath + "/profiles/minimal.nix")
+    ../virtualization/podman-utils.nix
+    ../virtualization/portainer.nix
+  ];
+
+  config = {
+    #Provide a default hostname
+    networking.hostName = lib.mkDefault "crowsnest";
+
+    # Activate firewall
+    networking.firewall.enable = true;
+
+    # Open firewall ports for Portainer
+    networking.firewall.allowedTCPPorts = [ 2112 8000 9443 9000 ];
+
+    # Time Zone
+    time.timeZone = "America/Chicago";
+
+    # Enable QEMU Guest for Proxmox
+    services.qemuGuest.enable = lib.mkDefault true;
+
+    # Use the boot drive for grub
+    boot.loader.grub.enable = lib.mkDefault true;
+    boot.loader.grub.devices = [ "nodev" ];
+
+    boot.growPartition = lib.mkDefault true;
+
+    # Allow remote updates with flakes and non-root users
+    nix.settings.trusted-users = [ "root" "@wheel" ];
+    nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+    # Some sane packages we need on every system
+    environment.systemPackages = with pkgs; [
+      vim # for emergencies
+      git # for pulling nix flakes
+      zsh
+      bat
+      eza
+    ];
+
+    environment.shells = with pkgs; [ zsh ];
+    users.defaultUserShell = pkgs.zsh;
+    programs.zsh = {
+      shellAliases = {
+        #.. = "cd ..";
+        h = "cd ~";
+        ls = "eza --icons -l -T -L=1";
+        cat = "bat";
+      };
+      enable = lib.mkDefault true;
+      autosuggestions.enable = lib.mkDefault true;
+    };
+
+    #oh-my-zsh
+    programs.zsh.ohMyZsh = {
+      enable = lib.mkDefault true;
+      theme = lib.mkDefault "jtriley";
+    };
+
+    # Default filesystem
+    fileSystems."/" = lib.mkDefault {
+      device = "/dev/disk/by-label/nixos";
+      autoResize = true;
+      fsType = "ext4";
+    };
+
+    system.stateVersion = lib.mkDefault "25.05";
+
+    # Let the VM take care of its own upgrades.
+    system.autoUpgrade.enable = true;
+
+    # Clean Nix up after upgrades.
+    programs.nh = {
+      enable = true;
+      clean.enable = true;
+      clean.extraArgs = "--keep 5";
+    };
+
+    security.sudo.wheelNeedsPassword = false; # Don't ask for passwords
+    services.openssh = {
+      enable = true;
+      settings.PasswordAuthentication = false;
+      settings.KbdInteractiveAuthentication = false;
+      ports = [ 2112 ];
+    };
+    programs.ssh.startAgent = true;
+
+    # Add an admin user
+    users.users.shawnb = lib.mkDefault {
+      isNormalUser = true;
+      hashedPassword = "";
+      description = "Shawn Borton";
+      extraGroups = [ "networkmanager" "wheel" ];
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILgyiCfvu21kVTfRyKjzpH+93k7Jsf+EqLfN6NtolHnf tech@shilohsvillage.com"
+      ];
+    };
+  };
+}

crows_nest/disk-config.nix

@@ -0,0 +1,53 @@
+# Example to create a bios compatible gpt partition
+{ lib, ... }: {
+  disko.devices = {
+    disk.disk1 = {
+      device = lib.mkDefault "/dev/sda";
+      type = "disk";
+      content = {
+        type = "gpt";
+        partitions = {
+          boot = {
+            name = "boot";
+            size = "1M";
+            type = "EF02";
+          };
+          esp = {
+            name = "ESP";
+            size = "500M";
+            type = "EF00";
+            content = {
+              type = "filesystem";
+              format = "vfat";
+              mountpoint = "/boot";
+            };
+          };
+          root = {
+            name = "root";
+            size = "100%";
+            content = {
+              type = "lvm_pv";
+              vg = "pool";
+            };
+          };
+        };
+      };
+    };
+    lvm_vg = {
+      pool = {
+        type = "lvm_vg";
+        lvs = {
+          root = {
+            size = "100%FREE";
+            content = {
+              type = "filesystem";
+              format = "ext4";
+              mountpoint = "/";
+              mountOptions = [ "defaults" ];
+            };
+          };
+        };
+      };
+    };
+  };
+}