kiri/lux
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: ponytail audit

Browse Source
This commit is contained in:
kiri committed 2026-09-06 04:03:54 +02:00
1 parent de8b59ec16
commit f080ebe36e
57 files changed
+566 -2137
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

modules/hosts/orion/_disk.nix
-3
View File
@@ -10,7 +10,6 @@
type = "gpt";
partitions = {
boot = {
name = "boot";
size = "1M";
type = "EF02";
};
@@ -25,7 +24,6 @@
};
};
root = {
name = "root";
size = "100%";
content = {
type = "lvm_pv";
@@ -43,7 +41,6 @@
type = "filesystem";
format = "ext4";
mountpoint = "/";
mountOptions = [ "defaults" ];
};
};
};
modules/hosts/orion/_hardware.nix
-7
View File
@@ -7,16 +7,9 @@
boot.initrd.availableKernelModules = [
"ata_piix"
"uhci_hcd"
"virtio_pci"
"virtio_scsi"
"sd_mod"
"sr_mod"
];
boot.initrd.kernelModules = [ ];
boot.kernelModules = [ ];
boot.extraModulePackages = [ ];
networking.useDHCP = lib.mkDefault true;
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
}
modules/hosts/orion/default.nix
+19 -23
View File
@@ -1,7 +1,6 @@
{ config, ... }:
let
nixosModules = config.flake.modules.nixos;
account = config.facts.account;
in
{
facts.machines.orion = {
@@ -11,29 +10,26 @@ in
stateVersion = "24.05";
};
flake.modules.nixos.orion =
{ ... }:
{
imports = [
nixosModules.host-base
flake.modules.nixos.orion = {
imports = [
nixosModules.host-base
nixosModules.sops-host-ssh-key
nixosModules.openssh
nixosModules.caddy
nixosModules.server-firewall
nixosModules.sudo-ssh-agent-auth
# nixosModules.vps-insights
nixosModules.vaultwarden
nixosModules.radicale
nixosModules.actual
nixosModules.gitea
nixosModules.transcription
./_hardware.nix
./_disk.nix
];
nixosModules.sops-host-ssh-key
nixosModules.openssh
nixosModules.caddy
nixosModules.server-firewall
nixosModules.sudo-ssh-agent-auth
nixosModules.vaultwarden
nixosModules.radicale
nixosModules.actual
nixosModules.gitea
nixosModules.transcription
./_hardware.nix
./_disk.nix
];
environment.enableAllTerminfo = true;
environment.enableAllTerminfo = true;
users.users.${account.name}.linger = true;
};
users.users.${config.facts.account.name}.linger = true;
};
}
modules/hosts/polaris/_hardware.nix
+1 -13
View File
@@ -1,9 +1,4 @@
{
config,
lib,
modulesPath,
...
}:
{ lib, modulesPath, ... }:
{
imports = [
(modulesPath + "/installer/scan/not-detected.nix")
@@ -17,9 +12,7 @@
"usb_storage"
"sd_mod"
];
boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-amd" ];
boot.extraModulePackages = [ ];
fileSystems."/" = {
device = "/dev/disk/by-uuid/bda7f8b9-2b3d-4190-8518-baa50490227e";
@@ -35,10 +28,5 @@
];
};
swapDevices = [ ];
networking.useDHCP = lib.mkDefault true;
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}
modules/hosts/polaris/default.nix
+21 -29
View File
@@ -9,48 +9,40 @@ in
{
facts.machines.polaris = {
system = "x86_64-linux";
sshKeys = {
personal.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEVORk45HKkX7gaGGp90KsVyUy6t+fKhbWN/grjkf3cQ kiri@polaris";
work.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM5DMV6EQzsscgEOE0912mNglUHTEl+LPnaWYjj0y57B kiri@polaris#work";
};
sshKeys.personal.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEVORk45HKkX7gaGGp90KsVyUy6t+fKhbWN/grjkf3cQ kiri@polaris";
sshKeys.work.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM5DMV6EQzsscgEOE0912mNglUHTEl+LPnaWYjj0y57B kiri@polaris#work";
syncthingId = "6HBAKXB-DB3B4H2-BODCAXF-KD23H5W-6X5LGLC-ZJHZHLG-7U7YMGO-BB6IXQ3";
stateVersion = "24.05";
displays = {
"LG Electronics LG ULTRAGEAR 103NTYT8R290" = {
x = 0;
y = 0;
};
"LG Electronics LG ULTRAGEAR 103NTYT8R290" = { };
"LG Electronics LG ULTRAGEAR 103NTJJ8R332" = {
primary = true;
x = 2560;
y = 0;
};
};
};
flake.modules.nixos.polaris =
{ ... }:
{
imports = [
nixosModules.workstation-base
nixosModules.openssh
nixosModules.steam
./_hardware.nix
]
++ (with inputs.nixos-hardware.nixosModules; [
common-pc
common-pc-ssd
common-cpu-amd
common-gpu-amd
]);
flake.modules.nixos.polaris = {
imports = [
nixosModules.workstation-base
nixosModules.openssh
nixosModules.steam
./_hardware.nix
]
++ (with inputs.nixos-hardware.nixosModules; [
common-pc
common-pc-ssd
common-cpu-amd
common-gpu-amd
]);
services.openssh.openFirewall = false;
networking.firewall.extraInputRules = ''
ip saddr 192.168.178.0/24 tcp dport 22 accept
'';
};
services.openssh.openFirewall = false;
networking.firewall.extraInputRules = ''
ip saddr 192.168.178.0/24 tcp dport 22 accept
'';
};
}
modules/hosts/zenith/_hardware.nix
-7
View File
@@ -10,9 +10,6 @@
"usb_storage"
"sd_mod"
];
boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-amd" ];
boot.extraModulePackages = [ ];
fileSystems."/" = {
device = "/dev/disk/by-uuid/6d8f6f33-c9d9-4e90-b496-d5b3ef5e9aeb";
@@ -28,9 +25,5 @@
];
};
swapDevices = [ ];
networking.useDHCP = lib.mkDefault true;
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
}
modules/hosts/zenith/default.nix
+12 -18
View File
@@ -10,10 +10,8 @@ in
facts.machines.zenith = {
system = "x86_64-linux";
sshKeys = {
personal.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIQy4k04gU7UpjBgyUQ57kUwxOdt79LvMCiCekXZeZhd kiri@zenith";
work.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIHJz5uHKm0/TiMNh/cmzrODHNZ8NgEEZe+47XnJwQGk kiri@zenith#work";
};
sshKeys.personal.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIQy4k04gU7UpjBgyUQ57kUwxOdt79LvMCiCekXZeZhd kiri@zenith";
sshKeys.work.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIHJz5uHKm0/TiMNh/cmzrODHNZ8NgEEZe+47XnJwQGk kiri@zenith#work";
syncthingId = "5VMGBZJ-NNAVCLY-YWHCJLM-EJ3SCFC-EOGCECD-DGXC7EL-J5NXAAG-4JDEMQG";
@@ -30,18 +28,14 @@ in
stateVersion = "24.05";
};
flake.modules.nixos.zenith =
{ ... }:
{
imports = [
nixosModules.workstation-base
nixosModules.laptop-power
{
hardware.enableRedistributableFirmware = true;
services.fwupd.enable = true;
}
./_hardware.nix
inputs.nixos-hardware.nixosModules.lenovo-yoga-7-14ARH7-amdgpu
];
};
flake.modules.nixos.zenith = {
imports = [
nixosModules.workstation-base
nixosModules.laptop-power
./_hardware.nix
inputs.nixos-hardware.nixosModules.lenovo-yoga-7-14ARH7-amdgpu
];
services.fwupd.enable = true;
};
}