Add VPS host
This commit is contained in:
parent
bb686b0fc0
commit
95d4a32acb
8 changed files with 220 additions and 2 deletions
15
flake.nix
15
flake.nix
|
|
@ -44,6 +44,15 @@
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
|
nixosConfigurations."vps" = nixpkgs.lib.nixosSystem {
|
||||||
|
system = "x86_64-linux";
|
||||||
|
modules = [
|
||||||
|
disko.nixosModules.disko
|
||||||
|
./hosts/nixos/vps/system.nix
|
||||||
|
./hosts/nixos/vps/disk-config.nix
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
homeConfigurations = {
|
homeConfigurations = {
|
||||||
"yanlin@imac" = home-manager.lib.homeManagerConfiguration {
|
"yanlin@imac" = home-manager.lib.homeManagerConfiguration {
|
||||||
pkgs = nixpkgs.legacyPackages.aarch64-darwin;
|
pkgs = nixpkgs.legacyPackages.aarch64-darwin;
|
||||||
|
|
@ -62,6 +71,12 @@
|
||||||
modules = [ ./hosts/nixos/hs/home.nix ];
|
modules = [ ./hosts/nixos/hs/home.nix ];
|
||||||
extraSpecialArgs = { inherit claude-code nixvim; };
|
extraSpecialArgs = { inherit claude-code nixvim; };
|
||||||
};
|
};
|
||||||
|
|
||||||
|
"yanlin@vps" = home-manager.lib.homeManagerConfiguration {
|
||||||
|
pkgs = nixpkgs.legacyPackages.x86_64-linux;
|
||||||
|
modules = [ ./hosts/nixos/vps/home.nix ];
|
||||||
|
extraSpecialArgs = { inherit claude-code nixvim; };
|
||||||
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
||||||
|
|
@ -12,7 +12,6 @@
|
||||||
../../modules/termscp.nix
|
../../modules/termscp.nix
|
||||||
../../modules/rsync.nix
|
../../modules/rsync.nix
|
||||||
../../modules/btop.nix
|
../../modules/btop.nix
|
||||||
../../modules/syncthing.nix
|
|
||||||
../../config/fonts.nix
|
../../config/fonts.nix
|
||||||
];
|
];
|
||||||
|
|
||||||
|
|
@ -50,7 +49,6 @@
|
||||||
fastfetch
|
fastfetch
|
||||||
|
|
||||||
# Development and build tools
|
# Development and build tools
|
||||||
texlive.combined.scheme-full
|
|
||||||
python312
|
python312
|
||||||
uv
|
uv
|
||||||
claude-code.packages.x86_64-linux.claude-code
|
claude-code.packages.x86_64-linux.claude-code
|
||||||
|
|
|
||||||
|
|
@ -3,6 +3,7 @@
|
||||||
{
|
{
|
||||||
imports = [
|
imports = [
|
||||||
../home-default.nix
|
../home-default.nix
|
||||||
|
../../../modules/syncthing.nix
|
||||||
];
|
];
|
||||||
|
|
||||||
# hs-specific home configuration
|
# hs-specific home configuration
|
||||||
|
|
@ -11,5 +12,9 @@
|
||||||
smart-report = "sudo /home/yanlin/.config/nix/scripts/daily-smart-report.sh";
|
smart-report = "sudo /home/yanlin/.config/nix/scripts/daily-smart-report.sh";
|
||||||
move-inbox = "cp -rl /mnt/storage/Media/downloads/.inbox/* /mnt/storage/Media/downloads/inbox && chown -R yanlin:users /mnt/storage/Media/downloads/inbox";
|
move-inbox = "cp -rl /mnt/storage/Media/downloads/.inbox/* /mnt/storage/Media/downloads/inbox && chown -R yanlin:users /mnt/storage/Media/downloads/inbox";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
home.packages = with pkgs; [
|
||||||
|
texlive.combined.scheme-full
|
||||||
|
];
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
|
||||||
48
hosts/nixos/vps/disk-config.nix
Normal file
48
hosts/nixos/vps/disk-config.nix
Normal file
|
|
@ -0,0 +1,48 @@
|
||||||
|
{
|
||||||
|
disko.devices = {
|
||||||
|
disk = {
|
||||||
|
main = {
|
||||||
|
type = "disk";
|
||||||
|
device = "/dev/sda";
|
||||||
|
content = {
|
||||||
|
type = "gpt";
|
||||||
|
partitions = {
|
||||||
|
# GRUB BIOS boot partition
|
||||||
|
boot = {
|
||||||
|
size = "1M";
|
||||||
|
type = "EF02";
|
||||||
|
};
|
||||||
|
# Boot partition
|
||||||
|
ESP = {
|
||||||
|
size = "1G";
|
||||||
|
type = "EF00";
|
||||||
|
content = {
|
||||||
|
type = "filesystem";
|
||||||
|
format = "vfat";
|
||||||
|
mountpoint = "/boot";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
# Swap partition
|
||||||
|
swap = {
|
||||||
|
size = "4G";
|
||||||
|
content = {
|
||||||
|
type = "swap";
|
||||||
|
randomEncryption = false;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
# Root partition (remaining space)
|
||||||
|
root = {
|
||||||
|
size = "100%";
|
||||||
|
content = {
|
||||||
|
type = "filesystem";
|
||||||
|
format = "ext4";
|
||||||
|
mountpoint = "/";
|
||||||
|
mountOptions = [ "defaults" "noatime" ];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
42
hosts/nixos/vps/hardware-configuration.nix
Normal file
42
hosts/nixos/vps/hardware-configuration.nix
Normal file
|
|
@ -0,0 +1,42 @@
|
||||||
|
# Hardware configuration for VPS
|
||||||
|
# This is a generic configuration suitable for most VPS providers
|
||||||
|
|
||||||
|
{ config, lib, pkgs, modulesPath, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
|
||||||
|
|
||||||
|
# Boot configuration - common kernel modules for VPS environments
|
||||||
|
boot.initrd.availableKernelModules = [
|
||||||
|
"ata_piix"
|
||||||
|
"uhci_hcd"
|
||||||
|
"virtio_pci"
|
||||||
|
"virtio_scsi"
|
||||||
|
"sd_mod"
|
||||||
|
"sr_mod"
|
||||||
|
"virtio_blk"
|
||||||
|
"virtio_net"
|
||||||
|
"xen_blkfront"
|
||||||
|
"xen_netfront"
|
||||||
|
];
|
||||||
|
boot.initrd.kernelModules = [ "virtio_balloon" "virtio_console" "virtio_rng" ];
|
||||||
|
boot.kernelModules = [ ];
|
||||||
|
boot.extraModulePackages = [ ];
|
||||||
|
|
||||||
|
# Filesystems are managed by disko configuration
|
||||||
|
# No filesystem declarations needed here
|
||||||
|
|
||||||
|
# No swap devices configured here - handled by disko
|
||||||
|
|
||||||
|
# Networking hardware
|
||||||
|
networking.useDHCP = lib.mkDefault true;
|
||||||
|
|
||||||
|
# Hardware-specific settings
|
||||||
|
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||||
|
|
||||||
|
# CPU microcode updates
|
||||||
|
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||||
|
|
||||||
|
# Enable firmware updates
|
||||||
|
hardware.enableRedistributableFirmware = lib.mkDefault true;
|
||||||
|
}
|
||||||
7
hosts/nixos/vps/home.nix
Normal file
7
hosts/nixos/vps/home.nix
Normal file
|
|
@ -0,0 +1,7 @@
|
||||||
|
{ config, pkgs, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
imports = [
|
||||||
|
../home-default.nix
|
||||||
|
];
|
||||||
|
}
|
||||||
97
hosts/nixos/vps/system.nix
Normal file
97
hosts/nixos/vps/system.nix
Normal file
|
|
@ -0,0 +1,97 @@
|
||||||
|
{ config, pkgs, ... }: {
|
||||||
|
imports = [
|
||||||
|
./hardware-configuration.nix
|
||||||
|
./disk-config.nix
|
||||||
|
../../../modules/tailscale.nix
|
||||||
|
../../../modules/borg.nix
|
||||||
|
];
|
||||||
|
|
||||||
|
# GRUB bootloader with UEFI support
|
||||||
|
boot.loader.grub = {
|
||||||
|
enable = true;
|
||||||
|
device = "nodev"; # Required for EFI systems
|
||||||
|
efiSupport = true;
|
||||||
|
efiInstallAsRemovable = true; # Better compatibility with VPS
|
||||||
|
};
|
||||||
|
|
||||||
|
# Network configuration
|
||||||
|
networking = {
|
||||||
|
hostName = "vps";
|
||||||
|
hostId = "a8c06f42"; # Required for some services, generated randomly
|
||||||
|
networkmanager.enable = false; # Use systemd-networkd for VPS
|
||||||
|
useDHCP = true; # VPS typically use DHCP
|
||||||
|
firewall = {
|
||||||
|
enable = true;
|
||||||
|
allowedTCPPorts = [ 22 ]; # Only SSH by default
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
# Set your time zone
|
||||||
|
time.timeZone = "Europe/Copenhagen";
|
||||||
|
|
||||||
|
# Select internationalisation properties
|
||||||
|
i18n.defaultLocale = "en_US.UTF-8";
|
||||||
|
|
||||||
|
# Enable the OpenSSH daemon
|
||||||
|
services.openssh = {
|
||||||
|
enable = true;
|
||||||
|
settings = {
|
||||||
|
PermitRootLogin = "prohibit-password"; # Allow key-based root login for nixos-anywhere
|
||||||
|
PasswordAuthentication = false;
|
||||||
|
KbdInteractiveAuthentication = false;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
# Root user configuration (for nixos-anywhere initial access)
|
||||||
|
users.users.root = {
|
||||||
|
openssh.authorizedKeys.keys = [
|
||||||
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGVvviqbwBEGDIbAUnmgHQJi+N5Qfvo5u49biWl6R7oC yanlin@MacBook-Air"
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
# Regular user account
|
||||||
|
users.users.yanlin = {
|
||||||
|
isNormalUser = true;
|
||||||
|
description = "yanlin";
|
||||||
|
extraGroups = [ "wheel" ]; # Enable sudo
|
||||||
|
shell = pkgs.zsh;
|
||||||
|
openssh.authorizedKeys.keys = [
|
||||||
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGVvviqbwBEGDIbAUnmgHQJi+N5Qfvo5u49biWl6R7oC yanlin@MacBook-Air"
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
# Enable sudo for wheel group
|
||||||
|
security.sudo.wheelNeedsPassword = false;
|
||||||
|
|
||||||
|
# List packages installed in system profile
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
vim
|
||||||
|
git
|
||||||
|
htop
|
||||||
|
curl
|
||||||
|
wget
|
||||||
|
rsync
|
||||||
|
tmux
|
||||||
|
tree
|
||||||
|
lsof
|
||||||
|
tcpdump
|
||||||
|
iotop
|
||||||
|
zsh
|
||||||
|
home-manager
|
||||||
|
];
|
||||||
|
|
||||||
|
# Enable zsh system-wide (required when set as user shell)
|
||||||
|
programs.zsh.enable = true;
|
||||||
|
|
||||||
|
# Enable experimental nix features
|
||||||
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
||||||
|
|
||||||
|
# Allow unfree packages globally
|
||||||
|
nixpkgs.config.allowUnfree = true;
|
||||||
|
|
||||||
|
# This value determines the NixOS release from which the default
|
||||||
|
# settings for stateful data, like file locations and database versions
|
||||||
|
# on your system were taken. It's perfectly fine and recommended to leave
|
||||||
|
# this value at the release version of the first install of this system.
|
||||||
|
system.stateVersion = "24.05"; # Did you read the comment?
|
||||||
|
}
|
||||||
|
|
@ -45,6 +45,12 @@
|
||||||
identityFile = "~/.ssh/keys/hetzner";
|
identityFile = "~/.ssh/keys/hetzner";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
"vps" = {
|
||||||
|
hostname = "91.98.84.215";
|
||||||
|
user = "yanlin";
|
||||||
|
identityFile = "~/.ssh/keys/hetzner";
|
||||||
|
};
|
||||||
|
|
||||||
"storage-box" = {
|
"storage-box" = {
|
||||||
hostname = "u448310.your-storagebox.de";
|
hostname = "u448310.your-storagebox.de";
|
||||||
user = "u448310";
|
user = "u448310";
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue