polen/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

pi/server more observable

Browse source
This commit is contained in:
Polen 2025-06-14 08:53:35 -04:00
parent 79b6257577
commit c8305dd3d8
4 changed files with 77 additions and 33 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Makefile
View file

@ -3,7 +3,7 @@ build-pi-image:
# Doest work yet # Doest work yet
rebuild-pi: rebuild-pi:
nixos-rebuild switch --flake .#pi --target-host polen@192.168.1.241 --use-remote-sudo nixos-rebuild switch --flake .#pi --target-host pi --build-host server --use-remote-sudo
deploy-server: deploy-server:
nixos-rebuild switch --flake .#server --target-host server --build-host server --use-remote-sudo nixos-rebuild switch --flake .#server --target-host server --build-host server --use-remote-sudo

76
devices/pi/configuration.nix
View file

@ -1,12 +1,16 @@
{ inputs, config, pkgs, lib, ... }: {
inputs,
let config,
pkgs,
lib,
...
}: let
user = "polen"; user = "polen";
hostname = "pi"; hostname = "pi";
in { in {
boot = { boot = {
kernelPackages = pkgs.linuxKernel.packages.linux_rpi3; kernelPackages = pkgs.linuxKernel.packages.linux_rpi3;
initrd.availableKernelModules = [ "xhci_pci" "usbhid" "usb_storage" ]; initrd.availableKernelModules = ["xhci_pci" "usbhid" "usb_storage"];
loader = { loader = {
grub.enable = false; grub.enable = false;
generic-extlinux-compatible.enable = true; generic-extlinux-compatible.enable = true;
@ -17,51 +21,63 @@ in {
"/" = { "/" = {
device = "/dev/disk/by-label/NIXOS_SD"; device = "/dev/disk/by-label/NIXOS_SD";
fsType = "ext4"; fsType = "ext4";
options = [ "noatime" ]; options = ["noatime"];
}; };
}; };
#sops.defaultSopsFile = ../../secrets/secrets.yaml; swapDevices = [
#sops.defaultSopsFormat = "yaml"; {
#sops.age.keyFile = "/home/polen/.config/sops/age/keys.txt"; device = "/var/lib/swapfile";
#sops.secrets.pi_user_pass.neededForUsers = true; size = 10 * 1024;
}
];
#sops.defaultSopsFile = ../../secrets/secrets.yaml;
#sops.defaultSopsFormat = "yaml";
#sops.age.keyFile = "/home/polen/.config/sops/age/keys.txt";
#sops.secrets.pi_user_pass.neededForUsers = true;
networking = { networking = {
networkmanager.enable = true; networkmanager.enable = true;
wireless.enable = false; wireless.enable = false;
hostName = hostname; hostName = hostname;
firewall.allowedTCPPorts = [ 80 443 ]; firewall.allowedTCPPorts = [80 443];
}; };
services.caddy = { services.caddy = {
enable = true; enable = true;
virtualHosts."mealie.polensky.me".extraConfig = '' virtualHosts."mealie.polensky.me".extraConfig = ''
reverse_proxy http://localhost:9925 reverse_proxy http://localhost:9925
''; '';
}; };
nix.settings.trusted-users = [ user ]; services.prometheus.exporters = {
node.enable = true;
node.openFirewall = true;
};
environment.systemPackages = with pkgs; [ nix.settings.trusted-users = [user];
htop-vim
neovim environment.systemPackages = with pkgs; [
tmux htop-vim
curl neovim
wget tmux
git curl
ranger wget
]; git
ranger
];
services.openssh.enable = true; services.openssh.enable = true;
virtualisation.docker.enable = true; virtualisation.docker.enable = true;
users = { users = {
mutableUsers = false; mutableUsers = false;
users."${user}" = { users."${user}" = {
isNormalUser = true; isNormalUser = true;
#hashedPasswordFile = config.sops.secrets.pi_user_pass.path; #hashedPasswordFile = config.sops.secrets.pi_user_pass.path;
extraGroups = [ "wheel" "docker" ]; extraGroups = ["wheel" "docker"];
}; };
}; };

28
devices/server/configuration.nix
View file

@ -15,6 +15,8 @@
}; };
#boot.kernelModules = ["msr"]; #boot.kernelModules = ["msr"];
boot.binfmt.emulatedSystems = ["aarch64-linux"];
services.openssh.enable = true; services.openssh.enable = true;
services = { services = {
@ -29,6 +31,31 @@
rpc-whitelist = "127.0.0.1,192.168.*.*"; rpc-whitelist = "127.0.0.1,192.168.*.*";
}; };
}; };
prometheus = {
enable = true;
exporters = {
node.enable = true;
};
scrapeConfigs = [
{
job_name = "node-exporters-lan";
static_configs = [
{
targets = ["192.168.1.241:9100"];
labels = {
instance = "pi";
};
}
{
targets = ["127.0.0.1:9100"];
labels = {
instance = "server";
};
}
];
}
];
};
}; };
networking = { networking = {
@ -36,6 +63,7 @@
firewall.allowedTCPPorts = [ firewall.allowedTCPPorts = [
8096 # jellyfin 8096 # jellyfin
9091 # transmission 9091 # transmission
9090 # prometheus
]; ];
}; };

4
devices/xps13/configuration.nix
View file

@ -29,14 +29,14 @@
nix = { nix = {
settings.experimental-features = ["nix-command" "flakes"]; settings.experimental-features = ["nix-command" "flakes"];
settings.trusted-users = ["polen"]; settings.trusted-users = ["polen"];
# settings.extra-platforms = config.boot.binfmt.emulatedSystems; settings.extra-platforms = config.boot.binfmt.emulatedSystems;
gc = { gc = {
automatic = true; automatic = true;
dates = "weekly"; dates = "weekly";
options = "--delete-older-than 15d"; options = "--delete-older-than 15d";
}; };
}; };
# boot.binfmt.emulatedSystems = ["aarch64-linux"]; boot.binfmt.emulatedSystems = ["aarch64-linux"];
# Configure network proxy if necessary # Configure network proxy if necessary
# networking.proxy.default = "http://user:password@proxy:port/"; # networking.proxy.default = "http://user:password@proxy:port/";