payas/nixos
Archived
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity
This repository has been archived on 2024-03-26. You can view files and clone it, but cannot push or open issues or pull requests.
nixos/flake.nix

44 lines
1.3 KiB
Nix
Raw Normal View History

Initial flake implementation For now, simply copied current configuration.nix and hardware-configuration.nix to hostname specific directory. Made minor modifications to remove input impurity from hardware-configuration.nix (<nixpkgs> to 4{modulesPath}). Created flake.nix to import the configuration.nix and just build it. Referred to this guy : https://github.com/MatthewCroughan/nixcfg
2020-11-03 15:41:12 +05:30
{
description = "Payas' NixOS configuration (flake edition)";
mbsync + msmtp + mu setup via home-manager Initial setup to email from within emacs. That required setting up above stuff, detailed below: mbsync : sync maildir with email host/provider (gmail) mu : index and search maildir msmtp : send mail All of the above have good module under home-manager, making it *relatively* straightforward to set the whole thing up.
2021-07-20 16:51:32 +05:30
inputs = {
nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
home-manager = {
url = "github:nix-community/home-manager";
inputs.nixpkgs.follows = "nixpkgs";
};
Use EmacsGcc package from emacs-overlay Use Emacs master branch with native compilation flag enabled. I tried Pgtk branch, but it is not always kept up to date with master (currently 3+ months behind) and could have some issues that aren't always tested. It does mean Wayland integration is imperfect, but right now it is good enough (with few minor annoyances). Emacs + Gcc (native-comp) native-comp is currently in upcoming release branch (28.0.50), while pgtk branch is yet to be merged. Using both above features is easily available with emacs-overlay provided by nix-community. I still haven't been able to get cachix build cache to work, so currrently this config builds full Emacs on machine. This extends system rebuild by 30+ minutes and reduces system useability for the same duration. Updating system frequently is not currently on my radar anyway, and I can probably stomach keeping the machine humming for 60+ minutes of system rebuild (compiling Emacs itself takes 25-30 min), as long as I do it less than once per week. Will see how it goes.
2021-10-29 16:25:07 +05:30
emacs-overlay = {
Revert "Temporarily pin emacs-overlay" This reverts commit 4fa3d1f70a45b3e1b4dfc6684b831a51633bff52.
2021-11-24 13:51:35 +05:30
url = "github:nix-community/emacs-overlay";
inputs.nixpkgs.follows = "nixpkgs";
Use EmacsGcc package from emacs-overlay Use Emacs master branch with native compilation flag enabled. I tried Pgtk branch, but it is not always kept up to date with master (currently 3+ months behind) and could have some issues that aren't always tested. It does mean Wayland integration is imperfect, but right now it is good enough (with few minor annoyances). Emacs + Gcc (native-comp) native-comp is currently in upcoming release branch (28.0.50), while pgtk branch is yet to be merged. Using both above features is easily available with emacs-overlay provided by nix-community. I still haven't been able to get cachix build cache to work, so currrently this config builds full Emacs on machine. This extends system rebuild by 30+ minutes and reduces system useability for the same duration. Updating system frequently is not currently on my radar anyway, and I can probably stomach keeping the machine humming for 60+ minutes of system rebuild (compiling Emacs itself takes 25-30 min), as long as I do it less than once per week. Will see how it goes.
2021-10-29 16:25:07 +05:30
};
Setup secrets management using agenix agenix uses age (a utility + standard) that encrypts secrets using ssh key. This simplifies secrets management quite a bit compared to GPG (my attempts for which have failed so far). Changes included: - Encrypt all current keys (mail, backups) using age, configured via agenix - All encrypted keys are committed to git repo and decrypted during boot - None of the keys are used anywhere just yet. They will replace file paths in future commit after testing - Decrypted keys are available after boot under user name with read-only permissions at default agenix location (as of this commit) - The Nix variable path is provided by agenix and can be used instead of having to recreate - multiple keys can be specified for single key, but for now I am only using one For now, the code is dirty and can definitely use improvements. It is just at a place where it is all working right now. TODO: Get age + agenix in environment packages available at runtime in NixOS Links: - https://github.com/ryantm/agenix - https://github.com/hlissner/dotfiles
2022-02-22 03:01:29 +05:30
agenix = {
url = "github:ryantm/agenix";
inputs.nixpkgs.follows = "nixpkgs";
};
mbsync + msmtp + mu setup via home-manager Initial setup to email from within emacs. That required setting up above stuff, detailed below: mbsync : sync maildir with email host/provider (gmail) mu : index and search maildir msmtp : send mail All of the above have good module under home-manager, making it *relatively* straightforward to set the whole thing up.
2021-07-20 16:51:32 +05:30
};
Initial flake implementation For now, simply copied current configuration.nix and hardware-configuration.nix to hostname specific directory. Made minor modifications to remove input impurity from hardware-configuration.nix (<nixpkgs> to 4{modulesPath}). Created flake.nix to import the configuration.nix and just build it. Referred to this guy : https://github.com/MatthewCroughan/nixcfg
2020-11-03 15:41:12 +05:30
Setup secrets management using agenix agenix uses age (a utility + standard) that encrypts secrets using ssh key. This simplifies secrets management quite a bit compared to GPG (my attempts for which have failed so far). Changes included: - Encrypt all current keys (mail, backups) using age, configured via agenix - All encrypted keys are committed to git repo and decrypted during boot - None of the keys are used anywhere just yet. They will replace file paths in future commit after testing - Decrypted keys are available after boot under user name with read-only permissions at default agenix location (as of this commit) - The Nix variable path is provided by agenix and can be used instead of having to recreate - multiple keys can be specified for single key, but for now I am only using one For now, the code is dirty and can definitely use improvements. It is just at a place where it is all working right now. TODO: Get age + agenix in environment packages available at runtime in NixOS Links: - https://github.com/ryantm/agenix - https://github.com/hlissner/dotfiles
2022-02-22 03:01:29 +05:30
outputs = { self, nixpkgs, home-manager, emacs-overlay, agenix, ... }: {
Initial flake implementation For now, simply copied current configuration.nix and hardware-configuration.nix to hostname specific directory. Made minor modifications to remove input impurity from hardware-configuration.nix (<nixpkgs> to 4{modulesPath}). Created flake.nix to import the configuration.nix and just build it. Referred to this guy : https://github.com/MatthewCroughan/nixcfg
2020-11-03 15:41:12 +05:30
nixosConfigurations = {
enterprise = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
mbsync + msmtp + mu setup via home-manager Initial setup to email from within emacs. That required setting up above stuff, detailed below: mbsync : sync maildir with email host/provider (gmail) mu : index and search maildir msmtp : send mail All of the above have good module under home-manager, making it *relatively* straightforward to set the whole thing up.
2021-07-20 16:51:32 +05:30
modules = [
Use EmacsGcc package from emacs-overlay Use Emacs master branch with native compilation flag enabled. I tried Pgtk branch, but it is not always kept up to date with master (currently 3+ months behind) and could have some issues that aren't always tested. It does mean Wayland integration is imperfect, but right now it is good enough (with few minor annoyances). Emacs + Gcc (native-comp) native-comp is currently in upcoming release branch (28.0.50), while pgtk branch is yet to be merged. Using both above features is easily available with emacs-overlay provided by nix-community. I still haven't been able to get cachix build cache to work, so currrently this config builds full Emacs on machine. This extends system rebuild by 30+ minutes and reduces system useability for the same duration. Updating system frequently is not currently on my radar anyway, and I can probably stomach keeping the machine humming for 60+ minutes of system rebuild (compiling Emacs itself takes 25-30 min), as long as I do it less than once per week. Will see how it goes.
2021-10-29 16:25:07 +05:30
./hosts/enterprise/configuration.nix
Setup secrets management using agenix agenix uses age (a utility + standard) that encrypts secrets using ssh key. This simplifies secrets management quite a bit compared to GPG (my attempts for which have failed so far). Changes included: - Encrypt all current keys (mail, backups) using age, configured via agenix - All encrypted keys are committed to git repo and decrypted during boot - None of the keys are used anywhere just yet. They will replace file paths in future commit after testing - Decrypted keys are available after boot under user name with read-only permissions at default agenix location (as of this commit) - The Nix variable path is provided by agenix and can be used instead of having to recreate - multiple keys can be specified for single key, but for now I am only using one For now, the code is dirty and can definitely use improvements. It is just at a place where it is all working right now. TODO: Get age + agenix in environment packages available at runtime in NixOS Links: - https://github.com/ryantm/agenix - https://github.com/hlissner/dotfiles
2022-02-22 03:01:29 +05:30
./modules/agenix.nix
agenix.nixosModules.age
Refactor some parts into separate files Move some logically independent and consisitent parts into separate modules (files): 1. Nix config : Package, experimental options, automatic garbage-collection config 2. Backups : Restic + rclone + systemd services for backup notifications This has reduced main configuration.nix by 100+ lines. These parts are also unlikely to be touched in tandem with other configuration and hence can be separated out.
2022-02-14 16:15:27 +05:30
(import ./nix.nix)
Switch Sound to PipeWire and move to separate module PipeWire is new Linux audio and video streams. Previously I used PulseAudio, and while it worked, it was less than perfect. Pulse used bit much processing, and in general had few bugs. Pipewire is supposed to be lighter, more stable, and it can use high quality codec for bluetooth. I took this opportunity to move sound-related config to its separate module (sound.nix). This is a beginning to nicely move inpendent config sections to their own modules. Sound config has pretty much zero relations with rest of the config, so it made sense to move it in separate file. Perhaps I can do the same with other stuff, maybe some services.
2021-09-13 08:08:58 +05:30
(import ./hosts/enterprise/sound.nix)
Refactor some parts into separate files Move some logically independent and consisitent parts into separate modules (files): 1. Nix config : Package, experimental options, automatic garbage-collection config 2. Backups : Restic + rclone + systemd services for backup notifications This has reduced main configuration.nix by 100+ lines. These parts are also unlikely to be touched in tandem with other configuration and hence can be separated out.
2022-02-14 16:15:27 +05:30
(import ./hosts/enterprise/backup.nix)
Enable binary cache for nix-community Finally fully enable binary cache for nix-community and emacs-overlay. No I don't have to build emacs from scratch for every master update :) This was done by means of cachix, which is a means to upload built derivations for others to share with. Nix-community has their own, and it makes using overlays provided by nix-community that much better. This should shave off 20-25 min per system rebuild. I am not sure if this will work as is after moving this config to new system, so here are the steps to follow: 1. nix shell nixpkgs#cachix 2. sudo cachix use nix-community 3. stage/commit cachix.nix and cachix/ from /etc/nixos 4. done Hopefully this will be enough in the future system move. If not, all the best to future me.
2021-11-13 12:15:53 +05:30
(import ./cachix.nix)
Refactor some parts into separate files Move some logically independent and consisitent parts into separate modules (files): 1. Nix config : Package, experimental options, automatic garbage-collection config 2. Backups : Restic + rclone + systemd services for backup notifications This has reduced main configuration.nix by 100+ lines. These parts are also unlikely to be touched in tandem with other configuration and hence can be separated out.
2022-02-14 16:15:27 +05:30
{ nixpkgs.overlays = [ emacs-overlay.overlay ]; }
mbsync + msmtp + mu setup via home-manager Initial setup to email from within emacs. That required setting up above stuff, detailed below: mbsync : sync maildir with email host/provider (gmail) mu : index and search maildir msmtp : send mail All of the above have good module under home-manager, making it *relatively* straightforward to set the whole thing up.
2021-07-20 16:51:32 +05:30
home-manager.nixosModules.home-manager
{
home-manager.useGlobalPkgs = true;
home-manager.useUserPackages = true;
home-manager.users.payas = import ./hosts/enterprise/home.nix;
}
];
Initial flake implementation For now, simply copied current configuration.nix and hardware-configuration.nix to hostname specific directory. Made minor modifications to remove input impurity from hardware-configuration.nix (<nixpkgs> to 4{modulesPath}). Created flake.nix to import the configuration.nix and just build it. Referred to this guy : https://github.com/MatthewCroughan/nixcfg
2020-11-03 15:41:12 +05:30
};
};
};
}
Reference in a new issue Copy permalink