X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=systems%2Fzoldene%2Fbase.nix;h=617cd8218ffb47a758759a2a8d26f2466c4b2d8a;hb=4098541d0fb32431c6dfb38bb382123e1484b74d;hp=2c0a4611b66c20a2cd8269ede3777ecadde85861;hpb=d3a40bd942537c35e3eb6cf9282798d704720290;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/systems/zoldene/base.nix b/systems/zoldene/base.nix index 2c0a461..617cd82 100644 --- a/systems/zoldene/base.nix +++ b/systems/zoldene/base.nix @@ -84,6 +84,19 @@ in firewall.allowedUDPPorts = [ 43484 ]; # needed for initrd proper network setup too useDHCP = lib.mkDefault true; + interfaces."enp0s31f6".ipv6.addresses = pkgs.lib.flatten (pkgs.lib.attrsets.mapAttrsToList + (n: ips: map (ip: { address = ip; prefixLength = (if n == "main" && ip == pkgs.lib.head ips.ip6 then 64 else 128); }) (ips.ip6 or [])) + config.hostEnv.ips); + defaultGateway6 = { + address = "fe80::1"; + interface = "enp0s31f6"; + }; + nameservers = [ + "185.12.64.1" + "185.12.64.2" + "2a01:4ff:ff00::add:1" + "2a01:4ff:ff00::add:2" + ]; wireguard.interfaces.wg0 = { generatePrivateKeyFile = true; @@ -99,7 +112,7 @@ in }; }; - powerManagement.cpuFreqGovernor = lib.mkDefault "powersave"; + powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand"; hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; hardware.enableRedistributableFirmware = lib.mkDefault true; system.activationScripts.createDatasets = { @@ -126,5 +139,15 @@ in # ssh-keyscan zoldene | nix-shell -p ssh-to-age --run ssh-to-age secrets.ageKeys = [ "age1rqr7qdpjm8fy9nf3x07fa824v87n40g0ljrgdysuayuklnvhcynq4c8en8" ]; + system.activationScripts.wrappers = { + text = '' + # wrappers was migrated to systemd, which happens before activation + ''; + }; + nixpkgs.overlays = [ + (self: super: { + postgresql_system = self.postgresql_16; + }) + ]; }