feat(vesuvio): tweak things and use systemd-boot
This commit is contained in:
parent
7399f8bbc0
commit
d2e32f8b38
3 changed files with 22 additions and 8 deletions
|
@ -36,6 +36,8 @@ in {
|
||||||
boot = {
|
boot = {
|
||||||
kernelPackages = pkgs.linuxPackages; # use lts
|
kernelPackages = pkgs.linuxPackages; # use lts
|
||||||
kernelParams = ["quiet" "loglevel=3"];
|
kernelParams = ["quiet" "loglevel=3"];
|
||||||
|
|
||||||
|
tmp.cleanOnBoot = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
console.keyMap = "fr";
|
console.keyMap = "fr";
|
||||||
|
|
|
@ -8,7 +8,6 @@
|
||||||
in {
|
in {
|
||||||
imports = [secrets.generate];
|
imports = [secrets.generate];
|
||||||
|
|
||||||
boot.tmp.cleanOnBoot = true;
|
|
||||||
zramSwap.enable = true;
|
zramSwap.enable = true;
|
||||||
|
|
||||||
environment.systemPackages = with pkgs; [dig traceroute];
|
environment.systemPackages = with pkgs; [dig traceroute];
|
||||||
|
@ -16,6 +15,9 @@ in {
|
||||||
services = {
|
services = {
|
||||||
openssh.ports = [4269];
|
openssh.ports = [4269];
|
||||||
|
|
||||||
|
# Needed by the Hetzner Cloud password reset feature.
|
||||||
|
qemuGuest.enable = true;
|
||||||
|
|
||||||
frp = {
|
frp = {
|
||||||
enable = true;
|
enable = true;
|
||||||
role = "server";
|
role = "server";
|
||||||
|
@ -29,7 +31,12 @@ in {
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
systemd.services.frp.serviceConfig.EnvironmentFile = secrets.get "frpToken";
|
systemd.services = {
|
||||||
|
frp.serviceConfig.EnvironmentFile = secrets.get "frpToken";
|
||||||
|
|
||||||
|
# https://discourse.nixos.org/t/qemu-guest-agent-on-hetzner-cloud-doesnt-work/8864/2
|
||||||
|
qemu-guest-agent.path = [pkgs.shadow];
|
||||||
|
};
|
||||||
|
|
||||||
networking.firewall = {
|
networking.firewall = {
|
||||||
allowedTCPPorts = [22]; # forgejo-ssh
|
allowedTCPPorts = [22]; # forgejo-ssh
|
||||||
|
|
|
@ -1,16 +1,21 @@
|
||||||
{modulesPath, ...}: {
|
{modulesPath, ...}: {
|
||||||
imports = [(modulesPath + "/profiles/qemu-guest.nix")];
|
imports = ["${modulesPath}/profiles/qemu-guest.nix"];
|
||||||
|
|
||||||
boot = {
|
boot = {
|
||||||
loader.grub = {
|
# arm so we can use systemd-boot
|
||||||
efiSupport = true;
|
loader = {
|
||||||
efiInstallAsRemovable = true;
|
systemd-boot.enable = true;
|
||||||
device = "nodev";
|
efi.canTouchEfiVariables = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# set console because the console defaults to serial and
|
||||||
|
# initialize the display early to get a complete log.
|
||||||
|
# this is required for typing in LUKS passwords on boot too.
|
||||||
|
kernelParams = ["console=tty"];
|
||||||
|
|
||||||
initrd = {
|
initrd = {
|
||||||
availableKernelModules = ["ata_piix" "uhci_hcd" "xen_blkfront"];
|
availableKernelModules = ["ata_piix" "uhci_hcd" "xen_blkfront"];
|
||||||
kernelModules = ["nvme"];
|
kernelModules = ["nvme" "virtio_gpu"];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue