feat(vesuvio): tweak things and use systemd-boot
This commit is contained in:
parent
7399f8bbc0
commit
d2e32f8b38
3 changed files with 22 additions and 8 deletions
|
@ -36,6 +36,8 @@ in {
|
|||
boot = {
|
||||
kernelPackages = pkgs.linuxPackages; # use lts
|
||||
kernelParams = ["quiet" "loglevel=3"];
|
||||
|
||||
tmp.cleanOnBoot = true;
|
||||
};
|
||||
|
||||
console.keyMap = "fr";
|
||||
|
|
|
@ -8,7 +8,6 @@
|
|||
in {
|
||||
imports = [secrets.generate];
|
||||
|
||||
boot.tmp.cleanOnBoot = true;
|
||||
zramSwap.enable = true;
|
||||
|
||||
environment.systemPackages = with pkgs; [dig traceroute];
|
||||
|
@ -16,6 +15,9 @@ in {
|
|||
services = {
|
||||
openssh.ports = [4269];
|
||||
|
||||
# Needed by the Hetzner Cloud password reset feature.
|
||||
qemuGuest.enable = true;
|
||||
|
||||
frp = {
|
||||
enable = true;
|
||||
role = "server";
|
||||
|
@ -29,7 +31,12 @@ in {
|
|||
};
|
||||
};
|
||||
|
||||
systemd.services.frp.serviceConfig.EnvironmentFile = secrets.get "frpToken";
|
||||
systemd.services = {
|
||||
frp.serviceConfig.EnvironmentFile = secrets.get "frpToken";
|
||||
|
||||
# https://discourse.nixos.org/t/qemu-guest-agent-on-hetzner-cloud-doesnt-work/8864/2
|
||||
qemu-guest-agent.path = [pkgs.shadow];
|
||||
};
|
||||
|
||||
networking.firewall = {
|
||||
allowedTCPPorts = [22]; # forgejo-ssh
|
||||
|
|
|
@ -1,16 +1,21 @@
|
|||
{modulesPath, ...}: {
|
||||
imports = [(modulesPath + "/profiles/qemu-guest.nix")];
|
||||
imports = ["${modulesPath}/profiles/qemu-guest.nix"];
|
||||
|
||||
boot = {
|
||||
loader.grub = {
|
||||
efiSupport = true;
|
||||
efiInstallAsRemovable = true;
|
||||
device = "nodev";
|
||||
# arm so we can use systemd-boot
|
||||
loader = {
|
||||
systemd-boot.enable = true;
|
||||
efi.canTouchEfiVariables = true;
|
||||
};
|
||||
|
||||
# set console because the console defaults to serial and
|
||||
# initialize the display early to get a complete log.
|
||||
# this is required for typing in LUKS passwords on boot too.
|
||||
kernelParams = ["console=tty"];
|
||||
|
||||
initrd = {
|
||||
availableKernelModules = ["ata_piix" "uhci_hcd" "xen_blkfront"];
|
||||
kernelModules = ["nvme"];
|
||||
kernelModules = ["nvme" "virtio_gpu"];
|
||||
};
|
||||
};
|
||||
|
||||
|
|
Loading…
Reference in a new issue