Bump Zoldene version

[perso/Immae/Config/Nix.git] / systems / zoldene / base.nix

diff --git a/systems/zoldene/base.nix b/systems/zoldene/base.nix
index 8ca5d52df8203ea94d013a2233090b337dc7293f..2751d631b07d178cb05fc316039e26668faae21b 100644 (file)
--- a/systems/zoldene/base.nix
+++ b/systems/zoldene/base.nix
@@ -1,4 +1,4 @@
-{ name, config, lib, pkgs, secrets, ... }:
+{ name, config, lib, pkgs, secrets, pkgs-no-overlay, ... }:
 let
   # udev rules to be able to boot from qemu in a rescue
   udev-qemu-rules =
@@ -9,6 +9,12 @@ let
     '') (builtins.attrNames disks));
 in
 {
+  imports = [
+    secrets.nixosModules.users-config-zoldene
+    ./virtualisation.nix
+    ./certificates.nix
+  ];
+
   services.openssh = {
     settings.KbdInteractiveAuthentication = false;
     hostKeys = [
@@ -119,4 +125,16 @@ in
   secrets.decryptKey = "/persist/zpool/etc/ssh/ssh_host_ed25519_key";
   # ssh-keyscan zoldene | nix-shell -p ssh-to-age --run ssh-to-age
   secrets.ageKeys = [ "age1rqr7qdpjm8fy9nf3x07fa824v87n40g0ljrgdysuayuklnvhcynq4c8en8" ];
+
+  system.activationScripts.wrappers = {
+    text = ''
+      # wrappers was migrated to systemd, which happens before activation
+    '';
+  };
+
+  nixpkgs.overlays = [
+    (self: super: {
+      postgresql_system = self.postgresql_16;
+    })
+  ];
 }