hosts/oignon/hardware.nix

   1 { pkgs, hostName, ... }:
   2 {
   3   imports = [
   4     ../../nixos/profiles/hardware/X201.nix
   5     ../../nixos/profiles/zfs.nix
   6     ../../nixos/profiles/zramSwap.nix
   7   ];
   8
   9   # Setting the machine-id avoids to reencrypt all credentials
  10   # when reinstalling NixOS on a new drive.
  11   # Manually generated with : uuidgen | tr -d -
  12   environment.etc.machine-id.source = ./machine-id.clear;
  13
  14   # The 32-bit host id of the host, formatted as 8 hexadecimal characters.
  15   # You should try to make this id unique among your hosts.
  16   # Manually generated with : uuidgen | head -c8
  17   networking.hostId = "ce53d0c3";
  18
  19   /*
  20     boot.loader.efi = {
  21     canTouchEfiVariables = true;
  22     efiSysMountPoint = "/boot/efi";
  23     };
  24   */
  25   boot.loader.grub = {
  26     enable = true;
  27     memtest86.enable = true;
  28     devices = [
  29       "/dev/disk/by-id/ata-Samsung_SSD_850_PRO_128GB_S1SMNSAFC36436X"
  30     ];
  31     configurationLimit = 16;
  32
  33     #zfsSupport = true;
  34     #efiSupport = true;
  35     #enableCryptodisk = true;
  36   };
  37
  38   hardware.enableRedistributableFirmware = true;
  39
  40   # Note that gobi_loader -2000 has to be rerun if the SIM is hot swapped
  41   services.udev.extraRules = ''
  42     ACTION=="add", SUBSYSTEM=="tty", KERNEL=="ttyUSB*", ATTRS{idVendor}=="05c6", ATTRS{idProduct}=="9204", RUN+="${pkgs.gobi_loader}/lib/udev/gobi_loader -2000 $env{DEVNAME} /home/julm/files/thinkpad-x201/gobi"
  43   '';
  44
  45   fileSystems."/boot" =
  46     {
  47       device = "/dev/disk/by-partlabel/${hostName}_ssd_boot";
  48       fsType = "ext2";
  49     };
  50   fileSystems."/boot/efi" =
  51     {
  52       device = "/dev/disk/by-partlabel/${hostName}_ssd_efi";
  53       fsType = "vfat";
  54     };
  55   swapDevices = [
  56     {
  57       device = "/dev/disk/by-partlabel/${hostName}_ssd_swap";
  58       randomEncryption = {
  59         enable = true;
  60         cipher = "aes-xts-plain64";
  61         source = "/dev/urandom";
  62       };
  63     }
  64   ];
  65
  66   boot.supportedFilesystems = [ "ntfs" "vfat" ];
  67
  68   fileSystems."/" =
  69     {
  70       device = "${hostName}/root";
  71       fsType = "zfs";
  72     };
  73   fileSystems."/nix" =
  74     {
  75       device = "${hostName}/nix";
  76       fsType = "zfs";
  77     };
  78   fileSystems."/var" =
  79     {
  80       device = "${hostName}/var";
  81       fsType = "zfs";
  82     };
  83
  84   services.pipewire.jack.enable = true;
  85
  86 }