summaryrefslogtreecommitdiff
path: root/Biz
diff options
context:
space:
mode:
authorBen Sima <ben@bsima.me>2020-04-19 16:50:36 -0700
committerBen Sima <ben@bsima.me>2020-04-19 17:51:39 -0700
commit35f0ade5ea77d17544d253f970ef94dd1c7cd9f0 (patch)
tree588c20152bc338f8ded6cba434817b2f8fdd5d1c /Biz
parent42d1fab5fd7af5682bd693d4784d9da1a2d4bfef (diff)
Switch to niv for managing third party sources
Diffstat (limited to 'Biz')
-rw-r--r--Biz/Dev/configuration.nix18
-rw-r--r--Biz/buildOS.nix56
2 files changed, 12 insertions, 62 deletions
diff --git a/Biz/Dev/configuration.nix b/Biz/Dev/configuration.nix
index 4a8839e..e822837 100644
--- a/Biz/Dev/configuration.nix
+++ b/Biz/Dev/configuration.nix
@@ -190,12 +190,18 @@ in {
nixos.enable = true;
};
- # Since this is the dev machine, we can turn these on at the expense of extra
- # disk space.
- nix.extraOptions = ''
- keep-outputs = true
- keep-derivations = true
- '';
+
+ nix = {
+ # 1 job * 2 cores = 2 maximum cores used at any one time
+ maxJobs = 1;
+ buildCores = 2;
+ # Since this is the dev machine, we can turn these on at the expense
+ # of extra disk space.
+ extraOptions = ''
+ keep-outputs = true
+ keep-derivations = true
+ '';
+ };
# This value determines the NixOS release with which your system is to be
# compatible, in order to avoid breaking some software such as database
diff --git a/Biz/buildOS.nix b/Biz/buildOS.nix
deleted file mode 100644
index 9e6c2f2..0000000
--- a/Biz/buildOS.nix
+++ /dev/null
@@ -1,56 +0,0 @@
-nixos:
-{ ipAddress ? null
-, enableVpn ? false
-, vpnConnectTo ? ""
-, vpnRsaPrivateKeyFile ? null
-, vpnEd25519PrivateKeyFile ? null
-, deps ? {} # an attrset overlayed to pkgs
-, configuration # see: configuration.nix(5)
-}:
-# assert enableVpn -> builtins.isString ipAddress;
-# assert enableVpn -> builtins.isString vpnRsaPrivateKeyFile;
-# assert enableVpn -> builtins.isString vpnEd25519PrivateKeyFile;
-let
- vpnExtraConfig = if enableVpn then ''
- ConnectTo = ${vpnConnectTo}
- Ed25519PrivateKeyFile = "${vpnEd25519PrivateKeyFile}"
- PrivateKeyFile = "${vpnRsaPrivateKeyFile}"
- '' else "";
- overlay = self: super: deps;
- defaults = {
- boot.cleanTmpDir = true;
- #networking.interfaces.simatime-vpn = [{ ipv4.address = ipAddress; }];
- networking.firewall.allowPing = true;
- nix.binaryCaches = [ "https://cache.nixos.org" ];
- nix.gc.automatic = true;
- nix.gc.dates = "Sunday 02:15";
- nix.maxJobs = 1; # "auto";
- nix.optimise.automatic = true;
- nix.optimise.dates = [ "Sunday 02:30" ];
- nixpkgs.overlays = [ overlay ];
- programs.mosh.enable = true;
- programs.mosh.withUtempter = true;
- security.acme.email = "ben@bsima.me";
- security.acme.acceptTerms = true;
- security.sudo.wheelNeedsPassword = false;
- services.clamav.daemon.enable = true; # security
- services.clamav.updater.enable = true; # security
- services.fail2ban.enable = true; # security
- services.openssh.enable = true;
- services.openssh.openFirewall = true;
- services.openssh.forwardX11 = true;
- services.openssh.passwordAuthentication = false;
- #services.tinc.networks.simatime-vpn.extraConfig = vpnExtraConfig;
- #services.tinc.networks.simatime-vpn.debugLevel = 3;
- #services.tinc.networks.simatime-vpn.interfaceType = "tap";
- #services.tinc.networks.simatime-vpn.hosts = import ./vpnHosts.nix;
- system.autoUpgrade.enable = false; # 'true' breaks our nixpkgs pin
- };
- os = nixos {
- system = "x86_64-linux";
- configuration = (defaults // configuration);
- };
-in {
- system = os.system;
- vm = os.vm;
-}