Compare commits

...

6 commits

Author SHA1 Message Date
decbb0713b
nijika: mount media subvolume on boot
holy fuck how did i not notice this for so long, like i didnt reboot for
a long time or smth???
2025-12-14 20:22:08 +11:00
efa6c47e10
Revert "deluge: use a declarative configuration"
This reverts commit c02057b16decb83b295e4ab52dfdc3124c9c15fb.
2025-12-14 20:07:25 +11:00
1397a7e9e1
jellyseer: remove jellyseer 2025-12-14 20:07:25 +11:00
db97556d3d
deluge: use a declarative configuration 2025-12-14 20:07:25 +11:00
cb2c94c4d9
bootloaders: split bootloaders into seperate files 2025-12-14 20:07:25 +11:00
ea97683dfd
nix: update flake sources to c2a0396 2025-12-14 19:04:45 +11:00
7 changed files with 51 additions and 31 deletions

24
flake.lock generated
View file

@ -116,11 +116,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1764922999, "lastModified": 1765526639,
"narHash": "sha256-LSvUxKm6S6ZAd/otQSkAHd3+8KJhi8OwGJGSe0K//B8=", "narHash": "sha256-4U8crbUT3PDQdqhaMLnVaxnciBlcnDAw8XAJaXiS0pA=",
"owner": "Jovian-Experiments", "owner": "Jovian-Experiments",
"repo": "Jovian-NixOS", "repo": "Jovian-NixOS",
"rev": "9b9ead1b5591b68f4048e7205ba1397bc85ce6c4", "rev": "457a55ed77a105088a47cb55b9eccf7768559451",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -162,11 +162,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1764161084, "lastModified": 1765684049,
"narHash": "sha256-HN84sByg9FhJnojkGGDSrcjcbeioFWoNXfuyYfJ1kBE=", "narHash": "sha256-svCS2r984qEowMT0y3kCrsD/m0J6zaF5I/UusS7QaH0=",
"owner": "LnL7", "owner": "LnL7",
"repo": "nix-darwin", "repo": "nix-darwin",
"rev": "e95de00a471d07435e0527ff4db092c84998698e", "rev": "9b628e171bfaea1a3d1edf31eee46251e0fe4a33",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -204,11 +204,11 @@
"nixpkgs": "nixpkgs" "nixpkgs": "nixpkgs"
}, },
"locked": { "locked": {
"lastModified": 1764900372, "lastModified": 1765591348,
"narHash": "sha256-kTXDohz28PWDyjH+7O6UkXtKwaP0JkCmjMTLc/wbjmk=", "narHash": "sha256-GI5eC3BWNBnYk+FV1cTYrjPLrqv1Q5HXD7kwHkqnZ8c=",
"owner": "Infinidoge", "owner": "Infinidoge",
"repo": "nix-minecraft", "repo": "nix-minecraft",
"rev": "777ee6af79272a1302815a2ea62b2a951aa9a6fe", "rev": "37f2aad139533c27689c00cef0d43f7c51d0b14e",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -235,11 +235,11 @@
}, },
"nixpkgs_2": { "nixpkgs_2": {
"locked": { "locked": {
"lastModified": 1764667669, "lastModified": 1765472234,
"narHash": "sha256-7WUCZfmqLAssbDqwg9cUDAXrSoXN79eEEq17qhTNM/Y=", "narHash": "sha256-9VvC20PJPsleGMewwcWYKGzDIyjckEz8uWmT0vCDYK0=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "418468ac9527e799809c900eda37cbff999199b6", "rev": "2fbfb1d73d239d2402a8fe03963e37aab15abe8b",
"type": "github" "type": "github"
}, },
"original": { "original": {

View file

@ -51,6 +51,7 @@
./modules/users/nico.nix ./modules/users/nico.nix
./modules/users/alex.nix ./modules/users/alex.nix
./modules/hardware/secureboot.nix ./modules/hardware/secureboot.nix
./modules/hardware/bootloader/systemd-boot.nix
lanzaboote.nixosModules.lanzaboote lanzaboote.nixosModules.lanzaboote
./hosts/nijika/configuration.nix ./hosts/nijika/configuration.nix

View file

@ -45,6 +45,12 @@
options = [ "fmask=0077" "dmask=0077" ]; options = [ "fmask=0077" "dmask=0077" ];
}; };
fileSystems."/media" =
{ device = "/dev/mapper/root";
fsType = "btrfs";
options = [ "subvol=media" ];
};
swapDevices = [ ]; swapDevices = [ ];
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";

View file

@ -6,9 +6,7 @@
{ {
# Use the systemd-boot EFI boot loader. # Use the systemd-boot EFI boot loader.
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true; boot.loader.efi.canTouchEfiVariables = true;
boot.loader.timeout = 0;
# Networking # Networking
networking.networkmanager.enable = true; networking.networkmanager.enable = true;

View file

@ -0,0 +1,23 @@
{ config, pkgs, ... }:
{
boot.loader.limine = {
enable = true;
validateChecksums = true;
panicOnChecksumMismatch = true;
enableEditor = false;
extraEntries =
''
/memtest86
protocol: chainload
path: boot():///efi/memtest86/memtest86.efi
'';
additionalFiles = {
"efi/memtest86/memtest86.efi" = "${pkgs.memtest86-efi}/BOOTX64.efi";
};
secureBoot.enable = true;
};
}

View file

@ -0,0 +1,9 @@
{ config, ... }:
{
boot.loader.systemd-boot = {
enable = true;
};
boot.loader.timeout = 0;
}

View file

@ -84,21 +84,4 @@
import block_non_private_ips import block_non_private_ips
''; '';
}; };
#
# Requesting Frontend
services.jellyseerr = {
enable = true;
port = 5055;
openFirewall = false;
package = pkgs.jellyseerr;
};
services.caddy.virtualHosts."jellyseer.${config.homelab.domain}" = {
useACMEHost = config.homelab.domain;
extraConfig = ''
reverse_proxy http://localhost:5055
import block_non_private_ips
'';
};
} }