Initial commit

machines/lil-maid/modules/default.nix

@@ -0,0 +1,7 @@
+{
+  imports = [
+    ./network
+    ./graphics.nix
+    ./sops.nix
+  ];
+}

machines/lil-maid/modules/graphics.nix

@@ -0,0 +1,19 @@
+{ pkgs, ... }:
+{
+  services.desktopManager.plasma6 = {
+    enable = true;
+  };
+  services.displayManager.sddm = {
+    enable = true;
+    wayland.enable = true;
+  };
+
+  services.xserver.xkb.layout = "us";
+
+  environment.sessionVariables.NIXOS_OZONE_WL = "1";
+  environment.plasma6.excludePackages = with pkgs.kdePackages; [
+    plasma-browser-integration
+    konsole
+    oxygen
+  ];
+}

machines/lil-maid/modules/network/default.nix

@@ -0,0 +1,16 @@
+{
+  imports = [
+    ./firewall.nix
+    ./ssh.nix
+
+    ./vpn
+  ];
+
+  networking.networkmanager.enable = true;
+
+  networking.search = [
+    "8.8.8.8"
+    "8.8.4.4"
+  ];
+  networking.hostName = "lil-maid";
+}

machines/lil-maid/modules/network/firewall.nix

@@ -0,0 +1,5 @@
+{
+  networking.firewall = {
+    enable = true;
+  };
+}

machines/lil-maid/modules/network/ssh.nix

@@ -0,0 +1,9 @@
+{
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = false;
+      Compression = "yes";
+    };
+  };
+}

machines/lil-maid/modules/network/vpn/default.nix

@@ -0,0 +1,5 @@
+{
+  imports = [
+    ./hft.nix
+  ];
+}

machines/lil-maid/modules/network/vpn/hft.nix

@@ -0,0 +1,4 @@
+{ config, ... }:
+{
+  systemd.services.openvpn-hft.wants = [ "shadowsocks-hft.service" ];
+}

machines/lil-maid/modules/sops.nix

@@ -0,0 +1,9 @@
+{
+  imports = [
+    ../../../modules/sops.nix
+  ];
+  maid.sops = {
+    work.enable = true;
+    viendesu.enable = true;
+  };
+}