Compare commits

...

7 Commits

Author SHA1 Message Date
Eli Ribble f57f7097c1 Add ssh key for eliribble, sort properties alhpabetically 2025-01-02 10:17:39 -07:00
Eli Ribble 4ae53fe701 Add sovr session secret to sovr-server config 2025-01-02 10:17:16 -07:00
Eli Ribble c26aef1700 Add 'deploy' user
We'll use this to run our server process
2025-01-02 10:16:32 -07:00
Eli Ribble e2461e9149 Initial sovr-server systemd service config
This also changes to directly referencing the local git checkout of my
flake definition which makes it faster and safer to iterate on the
logic.

At this point I am creating a systemd unit file, but it's not correct at
all.
2025-01-02 07:35:32 -07:00
Eli Ribble e3779851bb Move timezone to be alpha-sorted 2025-01-02 07:20:42 -07:00
Eli Ribble 1f3d84e37c Add working config for sovr flake.
This builds the sovr-server software from the flake defined in its root.
2025-01-02 07:20:14 -07:00
Eli Ribble 9a0d2bac7b Add neovim to sovr 2025-01-02 07:19:55 -07:00
3 changed files with 57 additions and 7 deletions

View File

@ -2,12 +2,13 @@
# your system. Help is available in the configuration.nix(5) man page, on
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
{ config, lib, pkgs, ... }:
{ config, pkgs, inputs, ... }:
{
imports =
[ # Include the results of the hardware scan.
./hardware-configuration.nix
inputs.sovr.nixosModules.default
];
# Use the GRUB 2 boot loader.
@ -21,9 +22,11 @@
environment.systemPackages = with pkgs; [
fish
git
neovim
tmux
vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
wget
inputs.sovr.packages."${pkgs.system}".sovr-server
];
i18n.defaultLocale = "en_US.UTF-8";
@ -38,9 +41,6 @@
programs.neovim.enable = true;
programs.neovim.defaultEditor = true;
# Set your time zone.
time.timeZone = "America/Phoenix";
# Configure network proxy if necessary
# networking.proxy.default = "http://user:password@proxy:port/";
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
@ -50,13 +50,26 @@
network.enable = true;
};
services.openssh.enable = true;
services.sovr-server = {
enable = true;
sessionSecret = "secret";
};
systemd.network.enable = true;
# Set your time zone.
time.timeZone = "America/Phoenix";
users.groups.deploy = {};
users.users.deploy = {
extraGroups = [ "deploy" ];
isNormalUser = true;
};
users.users.eliribble = {
extraGroups = [ "wheel" ]; # Enable sudo for the user.
initialHashedPassword = "$y$j9T$XYOMZR8RZEiTnpaF8lsxv1$H7YbWDpzbnYXTLN0ZMhvtKOlSMy64P7C/RdLBaeaNf/";
isNormalUser = true;
extraGroups = [ "wheel" ]; # Enable sudo for the user.
openssh.authorizedKeys.keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBvhtF6nRWlA6PVs71Eek7p0p2PxTd3P6ZEGFV2t75MB eliribble@nixos"];
};
users.users.root.initialHashedPassword = "$y$j9T$Ti26ax34797JfBHz.qOF20$Ft.w/amrklqfOxs1Q44udCON6qo8Yj51CqLSksOYAQ2";

View File

@ -16,9 +16,44 @@
"type": "github"
}
},
"nixpkgs_2": {
"locked": {
"lastModified": 1735264675,
"narHash": "sha256-MgdXpeX2GuJbtlBrH9EdsUeWl/yXEubyvxM1G+yO4Ak=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "d49da4c08359e3c39c4e27c74ac7ac9b70085966",
"type": "github"
},
"original": {
"owner": "NixOS",
"ref": "nixos-24.11",
"repo": "nixpkgs",
"type": "github"
}
},
"root": {
"inputs": {
"nixpkgs": "nixpkgs"
"nixpkgs": "nixpkgs",
"sovr": "sovr"
}
},
"sovr": {
"inputs": {
"nixpkgs": "nixpkgs_2"
},
"locked": {
"lastModified": 1735827455,
"narHash": "sha256-BpqQu/opMGrr6xUbbFQy2bkEbUSQhbxN4X8M8DRun5I=",
"ref": "refs/heads/main",
"rev": "950e618c387282e13e4ec865ae37d0e168b4469a",
"revCount": 60,
"type": "git",
"url": "file:///home/eliribble/src/sovr.cloud"
},
"original": {
"type": "git",
"url": "file:///home/eliribble/src/sovr.cloud"
}
}
},

View File

@ -4,10 +4,12 @@
inputs = {
# NixOS official package source, using the nixos-24.11 branch here
nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.11";
sovr.url = "git+file:///home/eliribble/src/sovr.cloud";
};
outputs = { self, nixpkgs, ... }@inputs: {
outputs = { self, nixpkgs, sovr, ... }@inputs: {
nixosConfigurations.sovr = nixpkgs.lib.nixosSystem {
specialArgs = { inherit inputs; };
system = "x86_64-linux";
modules = [
# Import the previous configuration.nix we used,