diff --git a/flake.nix b/flake.nix index 142f8bb..0635993 100644 --- a/flake.nix +++ b/flake.nix @@ -51,6 +51,14 @@ specialArgs = args; }; + # Raspberry Pi hosting my website + "cherry" = lib.nixosSystem { + system = "aarch64-linux"; + modules = [ + ./system/cherry/core.nix + ]; + }; + }; # Configurations for non-NixOS machines. diff --git a/shared/core/nix.nix b/shared/core/nix.nix index f0e55fd..7ff1fe6 100644 --- a/shared/core/nix.nix +++ b/shared/core/nix.nix @@ -6,6 +6,7 @@ in with lib; { options.custom.nix = {}; + # TODO: Add strawberry as a build machine here config = { nixpkgs.config.allowUnfree = true; nix.extraOptions = '' diff --git a/system/cherry/core.nix b/system/cherry/core.nix new file mode 100644 index 0000000..9b923b0 --- /dev/null +++ b/system/cherry/core.nix @@ -0,0 +1,50 @@ +{ pkgs, ... }: { + + boot.loader = { + grub.enable = false; + generic-extlinux-compatible.enable = true; + }; + + networking = { + hostName = "cherry"; + interfaces.eth0.useDHCP = true; + }; + + nix = { + # TODO: Set up strawberry as a substituter + # TODO: Set up nixbuild.net + # TODO: Figure out how to make it safe to use other machines as remote + # builders. + distributedBuilds = false; + buildMachines = []; + }; + + documentation.enable = false; + + fileSystems."/" = { + device = "/dev/disk/by-label/NIXOS_SD"; + fsType = "ext4"; + }; + + boot.kernelPackages = pkgs.linuxPackages_latest; + + # User for running the website service + users.users."website" = { + isSystemUser = true; + }; + + environment.systemPackages = with pkgs; [ + vim + git + ] ++ (import ../../shared/env.nix pkgs); + + users.users."root" = { + # Allow access to this server from all the machines + openssh.authorizedKeys.keyFiles = [ + ../dev-lt-63/riley.pub + ../strawberry/riley.pub + ../lime/riley.pub + ]; + }; + +} \ No newline at end of file diff --git a/system/strawberry/core.nix b/system/strawberry/core.nix index 33ab96c..9150b54 100644 --- a/system/strawberry/core.nix +++ b/system/strawberry/core.nix @@ -13,6 +13,15 @@ interfaces."enp9s0".useDHCP = true; }; + nix = { + sshServe.enable = true; + sshServe.keys = [ + (builtins.readFile ../cherry/keys/root.pub) + # (builtins.readFile ../dev-lt-63/keys/riley.pub) + # (builtins.readFile ../lime/keys/riley.pub) + ]; + }; + boot = { initrd.availableKernelModules = [ "nvme"