xin/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

chore: small fixes

Browse source
This commit is contained in:
xinyangli 2024-08-20 21:09:31 +08:00
parent ed19829fe4
commit 27901b05c6
Signed by: xin
SSH key fingerprint: SHA256:qZ/tzd8lYRtUFSrfBDBMcUqV4GHKxqeqRA3huItgvbk
5 changed files with 52 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

19
machines/calcite/configuration.nix
View file

@ -10,6 +10,7 @@
];
commonSettings = {
auth.enable = true;
nix = {
enableMirrors = true;
signing.enable = true;
@ -23,7 +24,7 @@
# boot.kernelPackages = pkgs.linuxPackages_latest;
boot.kernelModules = [ "nvidia" "nvidia_modeset" "nvidia_uvm" ];
boot.supportedFilesystems = [ "ntfs" ];
boot.binfmt.emulatedSystems = ["aarch64-linux"];
boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
security.tpm2 = {
enable = true;
@ -49,7 +50,8 @@
programs.oidc-agent.enable = true;
programs.oidc-agent.providers = [
{ issuer = "https://home.xinyang.life:9201";
{
issuer = "https://home.xinyang.life:9201";
pubclient = {
client_id = "xdXOt13JKxym1B1QcEncf2XDkLAexMBFwiT9j6EfhhHFJhs2KM9jbjTmf8JBXE69";
client_secret = "UBntmLjC2yYCeHwsyj73Uwo9TAaecAetRwMw0xYcvNL9yRdLSUi0hUAHfvCHFeFh";
@ -157,6 +159,7 @@
# Allow unfree packages
nixpkgs.config.allowUnfree = true;
nixpkgs.config.permittedInsecurePackages = [
"openssl-1.1.1w"
];
# List packages installed in system profile. To search, run:
# $ nix search wget
@ -208,13 +211,13 @@
element-desktop
tdesktop
qq
wechat-uos
feishu
# Password manager
bitwarden
# Browser
firefox
(chromium.override {
commandLineArgs = [
"--ozone-platform-hint=auto"
@ -253,7 +256,7 @@
owner = "root";
sopsFile = ./secrets.yaml;
};
gitea_env = {
"gitea/envfile" = {
owner = "root";
sopsFile = ./secrets.yaml;
};
@ -263,13 +266,19 @@
custom.restic.passwordFile = config.sops.secrets.restic_repo_calcite_password.path;
custom.forgejo-actions-runner.enable = true;
custom.forgejo-actions-runner.tokenFile = config.sops.secrets.gitea_env.path;
custom.forgejo-actions-runner.tokenFile = config.sops.secrets."gitea/envfile".path;
custom.prometheus = {
enable = true;
exporters.blackbox.enable = true;
};
services.ollama = {
enable = true;
acceleration = "cuda";
};
# MTP support
services.gvfs.enable = true;