This commit is contained in:
Henry Hiles 2026-02-24 16:47:46 -05:00
commit a0d7c07b06
No known key found for this signature in database
8 changed files with 17 additions and 162 deletions

View file

@ -1,16 +0,0 @@
{ config, lib, ... }:
{
users = {
mutableUsers = lib.mkForce true;
users.ava = {
isNormalUser = true;
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcXzWUeVwJN7iPxMT/1lhJySY4t6Z2/fH/GHVuzQFr6 cardno:32_241_564"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBnstd9HyyIjfXWfGymWDcRlK9nZuqgTIcueiqPUDaQ star@starforge"
];
hashedPasswordFile = config.age.secrets."initialFloriPassword.age".path;
description = "Flori Ava Star";
extraGroups = [ "wheel" ];
};
};
}

View file

@ -1,38 +0,0 @@
{ modulesPath, ... }:
{
imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
boot = {
initrd.luks.devices."luks-ef228969-52cc-4238-b90f-9d97d625bba6".device =
"/dev/disk/by-uuid/ef228969-52cc-4238-b90f-9d97d625bba6";
kernelParams = [ "ip=dhcp" ];
initrd.availableKernelModules = [
"sr_mod"
"ata_piix"
"uhci_hcd"
"virtio_pci"
"virtio_net"
"virtio_blk"
];
};
fileSystems = {
"/" = {
device = "/dev/disk/by-uuid/3c343e41-ca80-413f-a48c-af513bb28f5c";
fsType = "btrfs";
options = [ "subvol=@" ];
};
"/boot" = {
device = "/dev/disk/by-uuid/9300-4D1C";
fsType = "vfat";
options = [
"fmask=0077"
"dmask=0077"
];
};
};
swapDevices = [
{ device = "/dev/disk/by-uuid/c0c9de6f-9990-4346-b774-5f315b5ea115"; }
];
}

View file

@ -1,10 +0,0 @@
{
quad.matrix = {
enable = true;
domain = "polyphony.chat";
settings.well_known = {
support_email = "info@polyphony.chat";
support_mxid = null;
};
};
}

View file

@ -1,51 +0,0 @@
{
lib,
pkgs,
config,
...
}:
{
systemd.services.matrix-zulip-bridge = {
description = "matrix-zulip-bridge server";
wantedBy = [ "multi-user.target" ];
wants = [ "network-online.target" ];
after = [ "network-online.target" ];
serviceConfig =
let
secretName = "matrix-zulip-bridge-secrets";
in
{
LoadCredential = [
"${secretName}:${config.age.secrets."zulipRegistration.age".path}"
];
ExecStart = "${lib.getExe pkgs.matrix-zulip-bridge} --config /run/credentials/matrix-zulip-bridge.service/${secretName} --owner @quadradical:${config.quad.matrix.domain} ${config.services.matrix-continuwuity.settings.global.well_known.client}";
DynamicUser = true;
LockPersonality = true;
MemoryDenyWriteExecute = true;
ProtectClock = true;
ProtectControlGroups = true;
ProtectHostname = true;
ProtectKernelLogs = true;
ProtectKernelModules = true;
ProtectKernelTunables = true;
PrivateDevices = true;
PrivateMounts = true;
RestrictAddressFamilies = [
"AF_INET"
"AF_INET6"
];
RestrictNamespaces = true;
RestrictRealtime = true;
ProtectHome = true;
SystemCallArchitectures = "native";
SystemCallFilter = [
"@system-service"
"~@privileged"
"~@resources"
];
Restart = "always";
RestartSec = 5;
};
};
}

View file

@ -1,20 +0,0 @@
{ config, ... }:
{
fileSystems."/".options = [ "x-systemd.device-timeout=0" ];
networking.firewall.allowedTCPPorts = [ 222 ];
boot = {
loader.grub.enable = false;
initrd = {
systemd = {
enable = true;
users.root.shell = "/bin/systemd-tty-ask-password-agent";
};
network.ssh = {
enable = true;
port = 222;
hostKeys = [ "/etc/ssh/ssh_host_ed25519_key_initrd" ];
authorizedKeys = config.users.users.ava.openssh.authorizedKeys.keys;
};
};
};
}

View file

@ -1,12 +0,0 @@
{ modulesPath, ... }:
{
imports = [
(modulesPath + "/installer/scan/not-detected.nix")
(modulesPath + "/profiles/qemu-guest.nix")
];
boot.loader.grub = {
enable = true;
efiSupport = true;
efiInstallAsRemovable = true;
};
}

View file

@ -1,7 +1,8 @@
{
networking.useDHCP = false;
systemd.network.enable = true;
systemd.network.networks."30-wan" = {
systemd.network = {
enable = true;
networks."30-wan" = {
matchConfig.Name = "enp1s0";
networkConfig.DHCP = "no";
address = [
@ -16,4 +17,5 @@
{ Gateway = "fe80::1"; }
];
};
};
}