55 lines
1.3 KiB
Nix
55 lines
1.3 KiB
Nix
|
{
|
||
|
|
lib,
|
||
|
|
config,
|
||
|
|
pkgs,
|
||
|
|
...
|
||
|
|
}:
|
||
|
|
with lib;
|
||
|
|
{
|
||
|
|
imports = [
|
||
|
|
./users
|
||
|
|
./root.nix
|
||
|
|
];
|
||
|
|
options.kat = {
|
||
|
|
path = mkOption {
|
||
|
|
readOnly = true;
|
||
|
|
type = types.path;
|
||
|
|
};
|
||
|
|
anywhere = lib.mkOption {
|
||
|
|
type = lib.types.package;
|
||
|
|
readOnly = true;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
config = {
|
||
|
|
kat = {
|
||
|
|
path = ./.;
|
||
|
|
anywhere = pkgs.writeShellApplication {
|
||
|
|
name = "anywhere-deploy_${name}.sh";
|
||
|
|
runtimeInputs = [ pkgs.nixos-anywhere ];
|
||
|
|
# --kexec ${nodes.kat-kexec.config.system.build.kexecTarball}/${nodes.kat-kexec.config.system.kexec-installer.name}-${pkgs.stdenv.hostPlatform.system}.tar.gz
|
||
|
|
text = ''
|
||
|
|
nixos-anywhere --store-paths ${config.system.build.diskoScriptNoDeps} ${config.system.build.toplevel} ${config.deployment.targetHost}
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
};
|
||
|
|
boot.tmp.useTmpfs = true;
|
||
|
|
networking.nftables.enable = true;
|
||
|
|
nix = {
|
||
|
|
nixPath = [
|
||
|
|
"nixpkgs=${builtins.storePath pkgs.path}"
|
||
|
|
"nixos=${builtins.storePath pkgs.path}"
|
||
|
|
];
|
||
|
|
channel.enable = false;
|
||
|
|
settings.nix-path = config.nix.nixPath;
|
||
|
|
package = pkgs.lix;
|
||
|
|
};
|
||
|
|
services = {
|
||
|
|
resolved.enable = !config.boot.isContainer;
|
||
|
|
openssh.settings = {
|
||
|
|
ClientAliveInterval = 60;
|
||
|
|
ClientAliveCountMax = 1;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|