diff --git a/machines/sayuri/README.md b/machines/sayuri/README.md new file mode 100644 index 0000000..dc148e7 --- /dev/null +++ b/machines/sayuri/README.md @@ -0,0 +1,18 @@ +# sayuri + +## Hardware + +HP Z440 workstation. + + * [Intel Xeon E5-1620 v4](https://ark.intel.com/content/www/us/en/ark/products/92991/intel-xeon-processor-e5-1620-v4-10m-cache-3-50-ghz.html) + * 16 GiB DDR4 ECC memory + * 256GB micron SSD + * Sapphire Nitro+ Radeon RX 480 + +## Purpose + +FIMXE + +## Name + +Sayuri Kurata is a student from *Kanon* diff --git a/machines/sayuri/configuration.nix b/machines/sayuri/configuration.nix new file mode 100644 index 0000000..c55bd4e --- /dev/null +++ b/machines/sayuri/configuration.nix @@ -0,0 +1,43 @@ +{ config, pkgs, ... }: + +{ + imports = + [ + ./hardware-configuration.nix + ../../modules/cpu/intel.nix + ../../modules/gpu/amd.nix + (import ../../modules/libvirt.nix { inherit pkgs; gui = true; }) + ../../modules/restic.nix + ../../modules/ssd.nix + ../../profiles/base.nix + ../../profiles/dev.nix + ../../profiles/gui.nix + ../../users/simon/base.nix + ]; + + boot.loader.grub.device = "/dev/disk/by-id/ata-MTFDDAK256TBN-1AR15ABHA_UFZMQ01ZR50NMM"; + + boot.initrd.luks.devices = { + root = { + name = "root"; + device = "/dev/disk/by-uuid/d7e4d213-8a13-4059-a011-0f68081e86d8"; + preLVM = true; + allowDiscards = true; + }; + }; + + fileSystems.data = { + mountPoint = "/data"; + device = "/dev/mapper/data"; + encrypted = { + label = "data"; + enable = true; + blkDev = "/dev/disk/by-uuid/576088d4-9aae-4159-a028-feadb2621a1a"; + keyFile = "/mnt-root" + toString ./secrets/data_luks_key; + }; + }; + + networking.hostName = "sayuri"; + + networking.wireguard.interfaces.wg-home.ips = [ "10.80.0.5/24" ]; +} diff --git a/machines/sayuri/hardware-configuration.nix b/machines/sayuri/hardware-configuration.nix new file mode 100644 index 0000000..e993cc3 --- /dev/null +++ b/machines/sayuri/hardware-configuration.nix @@ -0,0 +1,33 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ config, lib, pkgs, modulesPath, ... }: + +{ + imports = + [ + (modulesPath + "/installer/scan/not-detected.nix") + ]; + + boot.initrd.availableKernelModules = [ "ahci" "xhci_pci" "ehci_pci" "usb_storage" "usbhid" "sd_mod" ]; + boot.initrd.kernelModules = [ "dm-snapshot" ]; + boot.kernelModules = [ "kvm-intel" ]; + boot.extraModulePackages = [ ]; + + fileSystems."/" = + { + device = "/dev/disk/by-uuid/024e31ab-aa98-4070-95be-7980043541ac"; + fsType = "ext4"; + }; + + fileSystems."/boot" = + { + device = "/dev/disk/by-uuid/c5bde64b-c629-438d-a78b-c4341796dae9"; + fsType = "ext2"; + }; + + swapDevices = + [{ device = "/dev/disk/by-uuid/78f5277f-a6e5-4297-99cd-d3ea5de5317e"; }]; + + powerManagement.cpuFreqGovernor = lib.mkDefault "powersave"; +} diff --git a/machines/sayuri/secrets/data_luks_key b/machines/sayuri/secrets/data_luks_key new file mode 100644 index 0000000..cac47d4 Binary files /dev/null and b/machines/sayuri/secrets/data_luks_key differ diff --git a/machines/sayuri/secrets/wg-home_private_key b/machines/sayuri/secrets/wg-home_private_key new file mode 100644 index 0000000..321042c Binary files /dev/null and b/machines/sayuri/secrets/wg-home_private_key differ