rc/hosts/glyph/default.nix at a1fd3a6e0eaa5c9c4fb7f1d361313f50b5ca7ed1 · stackptr/rc · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
{...}: {
  imports = [
    ./hardware.nix
    ./services
  ];

  boot.supportedFilesystems = ["ext4" "zfs"];
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  boot.zfs.forceImportRoot = false;

  fileSystems."/mnt/media" = {
    device = "zdata/media";
    fsType = "zfs";
  };
  fileSystems."/mnt/archive" = {
    device = "zdata/archive";
    fsType = "zfs";
  };
  fileSystems."/mnt/torrents" = {
    device = "zdata/torrents";
    fsType = "zfs";
  };
  fileSystems."/mnt/unsorted" = {
    device = "zdata/unsorted";
    fsType = "zfs";
  };
  fileSystems."/mnt/backup" = {
    device = "zdata/backup";
    fsType = "zfs";
  };

  networking.hostName = "glyph";
  networking.hostId = "e7bdc076"; # Ensure correct ZFS pool imported
  networking.firewall = {
    enable = true;
    trustedInterfaces = ["tailscale0"];
  };

  systemd.network.networks."10-wan" = {
    matchConfig.Name = "enp5s0";
    cakeConfig = {
      Parent = "root";
      Bandwidth = "900M";
      RTTSec = "10ms";
      FlowIsolation = "triple-isolate";
      Preset = "diffserv3";
    };
  };

  time.timeZone = "America/Los_Angeles";
  i18n.defaultLocale = "en_US.UTF-8";

  # Beets library database (beets configured in home-manager)
  rc.backup.paths = ["/home/mu/.config/beets/library.db"];

  # Deliberately fail activation to test deploy-rs magic rollback
  system.activationScripts.test-rollback = ''
    echo "Testing deploy-rs rollback: this activation will now fail deliberately"
    exit 1
  '';

  system.stateVersion = "24.05";
}