Merge remote-tracking branch 'gum/master'

1 files changed, 39 insertions, 5 deletions

diff --git a/makefu/1systems/darth.nix b/makefu/1systems/darth.nix
index a33744f0b..2f2358ddc 100644
--- a/makefu/1systems/darth.nix
+++ b/makefu/1systems/darth.nix
@@ -1,17 +1,51 @@
 { config, pkgs, lib, ... }:
 
 with config.krebs.lib;
-{
+let
+  byid = dev: "/dev/disk/by-id/" + dev;
+  rootDisk = byid "ata-ADATA_SSD_S599_64GB_10460000000000000039";
+  auxDisk = byid "ata-HGST_HTS721010A9E630_JR10006PH3A02F";
+  dataPartition = auxDisk + "-part1";
+
+  allDisks = [ rootDisk auxDisk ];
+in {
   imports = [
-        ../2configs/fs/single-partition-ext4.nix
-        ../2configs/zsh-user.nix
-        ../.
+      ../.
+      ../2configs/fs/single-partition-ext4.nix
+      ../2configs/zsh-user.nix
+      ../2configs/smart-monitor.nix
+      ../2configs/exim-retiolum.nix
+      ../2configs/virtualization.nix
   ];
 
+  networking.firewall.allowedUDPPorts = [ 80 655 67 ];
+  networking.firewall.allowedTCPPorts = [ 80 655 ];
+  networking.firewall.checkReversePath = false;
+  #networking.firewall.enable = false;
+  # virtualisation.nova.enableSingleNode = true;
   krebs.retiolum.enable = true;
 
-  boot.loader.grub.device = "/dev/disk/by-id/ata-ADATA_SSD_S599_64GB_10460000000000000039";
+  boot.kernelModules = [ "coretemp" "f71882fg" ];
+
+  hardware.enableAllFirmware = true;
+  nixpkgs.config.allowUnfree = true;
+  networking.wireless.enable = true;
+
+  # TODO smartd omo darth gum all-in-one
+  services.smartd.devices = builtins.map (x: { device = x; }) allDisks;
+  zramSwap.enable = true;
+
+  fileSystems."/data" = {
+    device = dataPartition;
+    fsType = "ext4";
+  };
+
+  boot.loader.grub.device = rootDisk;
+
   users.users.root.openssh.authorizedKeys.keys = [
     config.krebs.users.makefu-omo.pubkey
+    config.krebs.users.makefu-vbob.pubkey
   ];
+
+  krebs.build.host = config.krebs.hosts.darth;
 }