summaryrefslogtreecommitdiff
path: root/hosts/thinkpad
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/thinkpad')
-rw-r--r--hosts/thinkpad/default.nix9
-rw-r--r--hosts/thinkpad/hardware.nix17
-rw-r--r--hosts/thinkpad/sops.nix25
-rw-r--r--hosts/thinkpad/wireguard.nix27
4 files changed, 8 insertions, 70 deletions
diff --git a/hosts/thinkpad/default.nix b/hosts/thinkpad/default.nix
index 11b5bcb..e57214d 100644
--- a/hosts/thinkpad/default.nix
+++ b/hosts/thinkpad/default.nix
@@ -3,8 +3,6 @@
_: {
imports = [
./hardware.nix
- ./sops.nix
- ./wireguard.nix
];
# options
@@ -35,6 +33,13 @@ _: {
homestuck.enable = true;
minecraft.enable = true;
};
+ vpn = {
+ enable = true;
+ ip = "10.3.0.5/32";
+ };
+ bootloader = {
+ grub.enable = true;
+ };
# modules
battery.enable = true;
diff --git a/hosts/thinkpad/hardware.nix b/hosts/thinkpad/hardware.nix
index a012cbc..9d58333 100644
--- a/hosts/thinkpad/hardware.nix
+++ b/hosts/thinkpad/hardware.nix
@@ -1,24 +1,9 @@
-{
- config,
- inputs,
- ...
-}: {
+{inputs, ...}: {
# external defaults
imports = [
inputs.nixos-hardware.nixosModules.lenovo-thinkpad-x1-7th-gen
];
- # bootloader
- boot.loader = {
- efi.canTouchEfiVariables = true;
- grub = {
- enable = true;
- efiSupport = true;
- device = "nodev";
- splashImage = config.theme.wallpaper;
- };
- };
-
# kernel modules
boot.initrd.availableKernelModules = ["xhci_pci" "nvme" "usb_storage" "sd_mod"];
boot.initrd.kernelModules = [];
diff --git a/hosts/thinkpad/sops.nix b/hosts/thinkpad/sops.nix
deleted file mode 100644
index 9169bbc..0000000
--- a/hosts/thinkpad/sops.nix
+++ /dev/null
@@ -1,25 +0,0 @@
-{
- config,
- pkgs,
- inputs,
- ...
-}: {
- imports = [
- inputs.sops-nix.nixosModules.sops
- ];
-
- environment.systemPackages = with pkgs; [
- sops
- ];
-
- sops = {
- defaultSopsFile = ./secrets.yaml;
-
- gnupg.home = config.homePath + "/.local/share/gnupg";
- gnupg.sshKeyPaths = [];
-
- secrets = {
- freyanetWg = {};
- };
- };
-}
diff --git a/hosts/thinkpad/wireguard.nix b/hosts/thinkpad/wireguard.nix
deleted file mode 100644
index 72eb113..0000000
--- a/hosts/thinkpad/wireguard.nix
+++ /dev/null
@@ -1,27 +0,0 @@
-{
- config,
- pkgs,
- ...
-}: {
- environment.systemPackages = with pkgs; [
- wireguard-tools
- ];
-
- networking.wg-quick.interfaces = {
- freyanet = {
- address = ["10.3.0.5/32"];
- dns = ["10.2.0.1"];
- privateKeyFile = config.sops.secrets.freyanetWg.path;
- autostart = false;
-
- peers = [
- {
- publicKey = "x0ykwakpYCvI/pG+nR83lNUyeOE9m54thnX3bvZ+FUk=";
- allowedIPs = ["10.0.0.0/8"];
- endpoint = "freya.cat:3000";
- persistentKeepalive = 25;
- }
- ];
- };
- };
-}