diff options
Diffstat (limited to 'systems/dilion/base.nix')
-rw-r--r-- | systems/dilion/base.nix | 12 |
1 files changed, 0 insertions, 12 deletions
diff --git a/systems/dilion/base.nix b/systems/dilion/base.nix index ac4bdaf..c2778e3 100644 --- a/systems/dilion/base.nix +++ b/systems/dilion/base.nix | |||
@@ -30,7 +30,6 @@ | |||
30 | "/boot" = { fsType = "ext4"; device = "/dev/disk/by-uuid/fd1c511e-2bc0-49d5-b8bb-95e7e8c8c816"; }; | 30 | "/boot" = { fsType = "ext4"; device = "/dev/disk/by-uuid/fd1c511e-2bc0-49d5-b8bb-95e7e8c8c816"; }; |
31 | "/etc" = { fsType = "zfs"; device = "zpool/root/etc"; }; | 31 | "/etc" = { fsType = "zfs"; device = "zpool/root/etc"; }; |
32 | "/home" = { fsType = "zfs"; device = "zpool/root/home"; }; | 32 | "/home" = { fsType = "zfs"; device = "zpool/root/home"; }; |
33 | "/home/immae" = { fsType = "zfs"; device = "zpool/root/home/immae"; }; | ||
34 | "/tmp" = { fsType = "zfs"; device = "zpool/root/tmp"; }; | 33 | "/tmp" = { fsType = "zfs"; device = "zpool/root/tmp"; }; |
35 | "/var" = { fsType = "zfs"; device = "zpool/root/var"; }; | 34 | "/var" = { fsType = "zfs"; device = "zpool/root/var"; }; |
36 | "/data" = { fsType = "ext4"; label = "data"; }; | 35 | "/data" = { fsType = "ext4"; label = "data"; }; |
@@ -147,23 +146,12 @@ | |||
147 | in | 146 | in |
148 | ["command=\"${pkgs.zrepl}/bin/zrepl stdinserver --config ${zreplConfig} eldiron\",restrict ${config.myEnv.zrepl_backup.ssh_key.public}"]; | 147 | ["command=\"${pkgs.zrepl}/bin/zrepl stdinserver --config ${zreplConfig} eldiron\",restrict ${config.myEnv.zrepl_backup.ssh_key.public}"]; |
149 | }; | 148 | }; |
150 | security.sudo.extraRules = pkgs.lib.mkAfter [ | ||
151 | { | ||
152 | commands = [ | ||
153 | { command = "/home/immae/.nix-profile/root_scripts/*"; options = [ "NOPASSWD" ]; } | ||
154 | ]; | ||
155 | users = [ "immae" ]; | ||
156 | runAs = "root"; | ||
157 | } | ||
158 | ]; | ||
159 | 149 | ||
160 | virtualisation.docker.enable = true; | 150 | virtualisation.docker.enable = true; |
161 | virtualisation.docker.storageDriver = "zfs"; | 151 | virtualisation.docker.storageDriver = "zfs"; |
162 | virtualisation.libvirtd.enable = true; | 152 | virtualisation.libvirtd.enable = true; |
163 | virtualisation.libvirtd.qemu.package = pkgs-no-overlay.qemu; | 153 | virtualisation.libvirtd.qemu.package = pkgs-no-overlay.qemu; |
164 | systemd.services.libvirtd.path = lib.mkAfter [ config.boot.zfs.package ]; | 154 | systemd.services.libvirtd.path = lib.mkAfter [ config.boot.zfs.package ]; |
165 | users.groups.immae = {}; | ||
166 | users.extraUsers.immae.extraGroups = [ "immae" "libvirtd" "docker" ]; | ||
167 | systemd.services.libvirtd.postStart = '' | 155 | systemd.services.libvirtd.postStart = '' |
168 | install -m 0770 -g libvirtd -d /var/lib/libvirt/images | 156 | install -m 0770 -g libvirtd -d /var/lib/libvirt/images |
169 | ''; | 157 | ''; |