nixos-config/machines/mimir/configuration.nix

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ self, nixpkgs, nixos-hardware, ... }:
let
  pkgs = nixpkgs.legacyPackages.x86_64-linux;
in
{
  imports =
    [
      # Include the results of the hardware scan.
      nixos-hardware.nixosModules.common-cpu-amd
      nixos-hardware.nixosModules.common-cpu-amd-pstate
      nixos-hardware.nixosModules.common-pc-ssd

      ./hardware-configuration.nix

      ../../users/erwin
      ../../users/root
    ];

  # nixpkgs.config.allowUnfree = true;

  eboskma = {
    users = {
      erwin = {
        enable = true;
        work = true;
        terminal = "Alacritty";
      };
    };

    base = {
      plymouth.enable = true;
      work = true;
      kernel = pkgs.linuxKernel.packages.linux_6_0;
    };

    desktop = {
      enable = true;
      home-manager = true;
    };
    docker.enable = true;
    fonts.enable = true;
    gnome.enable = true;
    # greetd.enable = true;
    lightdm.enable = true;
    networking.enable = true;
    nix-common.enable = true;
    sound.enable = true;
    systemd.enable = true;
  };

  # Use the systemd-boot EFI boot loader.
  boot.loader = {
    systemd-boot = {
      enable = true;
      configurationLimit = 15;
    };
    efi.canTouchEfiVariables = true;
  };

  time.timeZone = "Europe/Amsterdam";

  console.useXkbConfig = true;

  networking = {
    hostName = "mimir";
    useDHCP = false;
    networkmanager.enable = false;
    useNetworkd = true;

    firewall = {
      trustedInterfaces = [ "lo" ];

      allowedTCPPorts = [
        # Horus System V2
        12345
        5555
        5556
      ];
    };
  };

  systemd.network = {
    enable = true;

    wait-online.anyInterface = true;

    networks = {
      "40-enp4s0" = {
        DHCP = "yes";
      };

      "40-enp5s0f1" = {
        linkConfig = {
          RequiredForOnline = false;
        };
      };
    };
  };

  services.openssh.enable = true;
  programs.ssh.startAgent = true;

  # sops = {
  #   defaultSopsFile = ./secrets.yaml;

  #   secrets = {};
  # };

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "22.11"; # Did you read the comment?

}