nixy/configuration.nix

@@ -13,34 +13,30 @@
   system.stateVersion = "23.05";
   system.autoUpgrade.enable = false;
 
-  sops = {
+  sops.age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
-    age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
+  sops.secrets."peerix/private" = {
-    secrets = {
+    sopsFile = ./secrets/peerix.yaml;
-      "peerix/private" = {
+    mode = "0400";
-        sopsFile = ./secrets/peerix.yaml;
+    owner = config.users.users.nobody.name;
-        mode = "0400";
+    group = config.users.users.nobody.group;
-        owner = config.users.users.nobody.name;
+  };
-        group = config.users.users.nobody.group;
-      };
 
-      "wg_privkey" = {
+  sops.secrets."wg_privkey" = {
-        sopsFile = ./secrets/wg_privkey.yaml;
+    sopsFile = ./secrets/wg_privkey.yaml;
-      };
+  };
 
-      "wg_preshared/nixy" = {
+  sops.secrets."wg_preshared/nixy" = {
-        sopsFile = ../common/secrets/wg_preshared.yaml;
+    sopsFile = ../common/secrets/wg_preshared.yaml;
-      };
+  };
 
-      "borgbase_enc_key" = {
+  sops.secrets."borgbase_enc_key" = {
-        sopsFile = ./secrets/borgbase_enc_key.yaml;
+    sopsFile = ./secrets/borgbase_enc_key.yaml;
-        owner = config.users.users.akill.name;
+    owner = config.users.users.akill.name;
-      };
+  };
 
-      "borgbase_ssh_key" = {
+  sops.secrets."borgbase_ssh_key" = {
-        sopsFile = ./secrets/borgbase_ssh_key.yaml;
+    sopsFile = ./secrets/borgbase_ssh_key.yaml;
-        owner = config.users.users.akill.name;
+    owner = config.users.users.akill.name;
-      };
-    };
   };
 
   nix = {
@@ -72,7 +68,7 @@
       memtest86.enable = true;
     };
     readOnlyNixStore = true;
-    supportedFilesystems = ["btrfs"];
+    supportedFilesystems = ["btrfs" "nfs"];
     tmp.useTmpfs = true;
   };
 
@@ -208,6 +204,7 @@
     ntp.enable = true;
     openssh.enable = true;
     printing.enable = true;
+    rpcbind.enable = true;
 
     pipewire = {
       enable = true;
@@ -416,7 +413,7 @@
       enable = true;
       driSupport = true;
       driSupport32Bit = true;
-      extraPackages = [];
+      extraPackages = with pkgs; [];
     };
     rtl-sdr.enable = true;
   };