diff options
Diffstat (limited to 'hosts/thinkpad')
| -rw-r--r-- | hosts/thinkpad/default.nix | 9 | ||||
| -rw-r--r-- | hosts/thinkpad/hardware.nix | 17 | ||||
| -rw-r--r-- | hosts/thinkpad/sops.nix | 25 | ||||
| -rw-r--r-- | hosts/thinkpad/wireguard.nix | 27 |
4 files changed, 8 insertions, 70 deletions
diff --git a/hosts/thinkpad/default.nix b/hosts/thinkpad/default.nix index 11b5bcb..e57214d 100644 --- a/hosts/thinkpad/default.nix +++ b/hosts/thinkpad/default.nix @@ -3,8 +3,6 @@ _: { imports = [ ./hardware.nix - ./sops.nix - ./wireguard.nix ]; # options @@ -35,6 +33,13 @@ _: { homestuck.enable = true; minecraft.enable = true; }; + vpn = { + enable = true; + ip = "10.3.0.5/32"; + }; + bootloader = { + grub.enable = true; + }; # modules battery.enable = true; diff --git a/hosts/thinkpad/hardware.nix b/hosts/thinkpad/hardware.nix index a012cbc..9d58333 100644 --- a/hosts/thinkpad/hardware.nix +++ b/hosts/thinkpad/hardware.nix @@ -1,24 +1,9 @@ -{ - config, - inputs, - ... -}: { +{inputs, ...}: { # external defaults imports = [ inputs.nixos-hardware.nixosModules.lenovo-thinkpad-x1-7th-gen ]; - # bootloader - boot.loader = { - efi.canTouchEfiVariables = true; - grub = { - enable = true; - efiSupport = true; - device = "nodev"; - splashImage = config.theme.wallpaper; - }; - }; - # kernel modules boot.initrd.availableKernelModules = ["xhci_pci" "nvme" "usb_storage" "sd_mod"]; boot.initrd.kernelModules = []; diff --git a/hosts/thinkpad/sops.nix b/hosts/thinkpad/sops.nix deleted file mode 100644 index 9169bbc..0000000 --- a/hosts/thinkpad/sops.nix +++ /dev/null @@ -1,25 +0,0 @@ -{ - config, - pkgs, - inputs, - ... -}: { - imports = [ - inputs.sops-nix.nixosModules.sops - ]; - - environment.systemPackages = with pkgs; [ - sops - ]; - - sops = { - defaultSopsFile = ./secrets.yaml; - - gnupg.home = config.homePath + "/.local/share/gnupg"; - gnupg.sshKeyPaths = []; - - secrets = { - freyanetWg = {}; - }; - }; -} diff --git a/hosts/thinkpad/wireguard.nix b/hosts/thinkpad/wireguard.nix deleted file mode 100644 index 72eb113..0000000 --- a/hosts/thinkpad/wireguard.nix +++ /dev/null @@ -1,27 +0,0 @@ -{ - config, - pkgs, - ... -}: { - environment.systemPackages = with pkgs; [ - wireguard-tools - ]; - - networking.wg-quick.interfaces = { - freyanet = { - address = ["10.3.0.5/32"]; - dns = ["10.2.0.1"]; - privateKeyFile = config.sops.secrets.freyanetWg.path; - autostart = false; - - peers = [ - { - publicKey = "x0ykwakpYCvI/pG+nR83lNUyeOE9m54thnX3bvZ+FUk="; - allowedIPs = ["10.0.0.0/8"]; - endpoint = "freya.cat:3000"; - persistentKeepalive = 25; - } - ]; - }; - }; -} |