hosts/oignon/hardware.nix

   1 { pkgs, hostName, ... }:
   2 {
   3   imports = [
   4     ../../nixos/profiles/hardware/X201.nix
   5     ../../nixos/profiles/zfs.nix
   6     ../../nixos/profiles/zramSwap.nix
   7   ];
   8
   9   # Setting the machine-id avoids to reencrypt all credentials
  10   # when reinstalling NixOS on a new drive.
  11   # Manually generated with : uuidgen | tr -d -
  12   environment.etc.machine-id.source = ./machine-id.clear;
  13
  14   # The 32-bit host id of the host, formatted as 8 hexadecimal characters.
  15   # You should try to make this id unique among your hosts.
  16   # Manually generated with : uuidgen | head -c8
  17   networking.hostId = "ce53d0c3";
  18
  19   /*
  20     boot.loader.efi = {
  21     canTouchEfiVariables = true;
  22     efiSysMountPoint = "/boot/efi";
  23     };
  24   */
  25   boot.loader.grub = {
  26     enable = true;
  27     memtest86.enable = true;
  28     devices = [
  29       "/dev/disk/by-id/ata-Samsung_SSD_850_PRO_128GB_S1SMNSAFC36436X"
  30     ];
  31     configurationLimit = 16;
  32
  33     #zfsSupport = true;
  34     #efiSupport = true;
  35     #enableCryptodisk = true;
  36   };
  37   boot.zfs.requestEncryptionCredentials = [ hostName ];
  38
  39   hardware.enableRedistributableFirmware = true;
  40
  41   # Note that gobi_loader -2000 has to be rerun if the SIM is hot swapped
  42   services.udev.extraRules = ''
  43     ACTION=="add", SUBSYSTEM=="tty", KERNEL=="ttyUSB*", ATTRS{idVendor}=="05c6", ATTRS{idProduct}=="9204", RUN+="${pkgs.gobi_loader}/lib/udev/gobi_loader -2000 $env{DEVNAME} /home/julm/files/thinkpad-x201/gobi"
  44   '';
  45
  46   fileSystems."/boot" = {
  47     device = "/dev/disk/by-partlabel/${hostName}_ssd_boot";
  48     fsType = "ext2";
  49   };
  50   fileSystems."/boot/efi" = {
  51     device = "/dev/disk/by-partlabel/${hostName}_ssd_efi";
  52     fsType = "vfat";
  53   };
  54   swapDevices = [
  55     {
  56       device = "/dev/disk/by-partlabel/${hostName}_ssd_swap";
  57       randomEncryption = {
  58         enable = true;
  59         cipher = "aes-xts-plain64";
  60         source = "/dev/urandom";
  61       };
  62     }
  63   ];
  64
  65   boot.supportedFilesystems = [
  66     "ntfs"
  67     "vfat"
  68   ];
  69
  70   fileSystems."/" = {
  71     device = "${hostName}/root";
  72     fsType = "zfs";
  73   };
  74   fileSystems."/nix" = {
  75     device = "${hostName}/nix";
  76     fsType = "zfs";
  77   };
  78   fileSystems."/var" = {
  79     device = "${hostName}/var";
  80     fsType = "zfs";
  81   };
  82
  83   services.pipewire.jack.enable = true;
  84
  85   services.acpid = {
  86     # Suspending not work well on this old computer.
  87     lidEventCommands = "";
  88   };
  89
  90 }