Initial commit

machines/lil-maid/configuration.nix

@@ -0,0 +1,10 @@
+{ pkgs, ... }:
+{
+  time.timeZone = "Europe/Moscow";
+
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.kernelPackages = pkgs.linuxKernel.packages.linux_zen;
+
+  system.stateVersion = "24.05";
+}

machines/lil-maid/default.nix

@@ -0,0 +1,13 @@
+{ inputs
+, modules
+, ... }:
+inputs.nixpkgs.lib.nixosSystem {
+  system = "x86_64-linux";
+  modules = [
+    inputs.home-manager.nixosModules.home-manager
+
+    ./configuration.nix
+    ./hardware
+    ./modules
+  ];
+}

machines/lil-maid/hardware/bluetooth.nix

@@ -0,0 +1,3 @@
+{
+  # TODO
+}

machines/lil-maid/hardware/configuration.nix

@@ -0,0 +1,33 @@
+
+{ config, lib, modulesPath, ... }:
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ "amdgpu" ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-label/nixos";
+      fsType = "btrfs";
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-label/boot";
+      fsType = "vfat";
+      options = [ "fmask=0077" "dmask=0077" ];
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-label/swap"; }
+    ];
+  networking.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+  hardware.enableAllFirmware = true;
+  hardware.enableRedistributableFirmware = true;
+}

machines/lil-maid/hardware/default.nix

@@ -0,0 +1,6 @@
+{
+  imports = [
+    ./configuration.nix
+    ./bluetooth.nix
+  ];
+}

machines/lil-maid/modules/default.nix

@@ -0,0 +1,7 @@
+{
+  imports = [
+    ./network
+    ./graphics.nix
+    ./sops.nix
+  ];
+}

machines/lil-maid/modules/graphics.nix

@@ -0,0 +1,11 @@
+{ commonMods, ... }:
+{
+  imports = [
+    (commonMods + "/kde")
+  ];
+
+  services.displayManager.sddm = {
+    enable = true;
+    wayland.enable = true;
+  };
+}

machines/lil-maid/modules/network/default.nix

@@ -0,0 +1,14 @@
+{
+  imports = [
+    ./firewall.nix
+    ./ssh.nix
+  ];
+
+  networking.networkmanager.enable = true;
+
+  networking.search = [
+    "8.8.8.8"
+    "8.8.4.4"
+  ];
+  networking.hostName = "lil-maid";
+}

machines/lil-maid/modules/network/firewall.nix

@@ -0,0 +1,5 @@
+{
+  networking.firewall = {
+    enable = true;
+  };
+}

machines/lil-maid/modules/network/ssh.nix

@@ -0,0 +1,9 @@
+{
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = false;
+      Compression = "yes";
+    };
+  };
+}

machines/lil-maid/modules/sops.nix

@@ -0,0 +1,16 @@
+{ commonMods, ... }:
+{
+  modules = [
+    # From this machine I work.
+    (commonMods + "/sops/work.nix")
+
+    # From this machine I develop VienDesu!
+    (commonMods + "/sops/viendesu.nix")
+  ];
+
+  sops = {
+    secrets."users/nero/password" = {
+      neededForUsers = true;
+    };
+  };
+}