WIP: loki recovery

This commit is contained in:
Filippo Berto 2023-12-05 14:15:37 +01:00
parent 949ad81237
commit 104f681bb9
No known key found for this signature in database
GPG key ID: FE98AE5EC52B1056
2 changed files with 81 additions and 103 deletions

View file

@ -4,16 +4,10 @@ with lib; {
boot = {
binfmt.emulatedSystems = [ "armv7l-linux" "aarch64-linux" ];
# kernelPackages = pkgs.linuxPackages_latest;
loader = {
systemd-boot.enable = true;
efi.canTouchEfiVariables = true;
};
loader = { systemd-boot.enable = true; efi.canTouchEfiVariables = true; };
};
console = {
font = "Lat2-Terminus16";
keyMap = "it";
};
console = { font = "Lat2-Terminus16"; keyMap = "it"; };
environment = {
pathsToLink = [ "/share/zsh" ];
@ -39,10 +33,7 @@ with lib; {
};
};
bluetooth = {
enable = true;
# package = pkgs.bluezFull;
};
bluetooth.enable = true;
};
i18n.defaultLocale = "it_IT.UTF-8";
@ -81,24 +72,11 @@ with lib; {
ssh = "${pkgs.avahi}/etc/avahi/services/ssh.service";
};
};
bazarr = {
enable = true;
openFirewall = true;
group = "users";
};
# bazarr = { enable = true; openFirewall = true; group = "users"; };
blueman.enable = true;
dbus = {
packages = [ pkgs.dconf ];
implementation = "broker";
};
esphome = {
enable = true;
openFirewall = true;
};
fail2ban = {
enable = true;
bantime-increment.enable = true;
};
dbus = { packages = [ pkgs.dconf ]; implementation = "broker"; };
esphome = { enable = true; openFirewall = true; };
fail2ban = { enable = true; bantime-increment.enable = true; };
gnome.gnome-keyring.enable = true;
gvfs.enable = true;
jackett = { enable = true; openFirewall = true; group = "users"; };
@ -108,68 +86,68 @@ with lib; {
openssh = { enable = true; openFirewall = true; };
# plex = { enable = true; openFirewall = true; group = "users"; };
power-profiles-daemon.enable = true;
prowlarr = { enable = true; openFirewall = true; };
radarr = { enable = true; openFirewall = true; group = "users"; };
# prowlarr = { enable = true; openFirewall = true; };
# radarr = { enable = true; openFirewall = true; group = "users"; };
samba-wsdd = { enable = true; discovery = true; };
samba = {
enable = true;
enableNmbd = true;
enableWinbindd = true;
nsswins = true;
extraConfig = ''
workgroup = WORKGROUP
load printers = no
smb encrypt = required
'';
shares =
let
common = {
"public" = "no";
"writeable" = "yes";
"create mask" = "0700";
"directory mask" = "2700";
"browseable" = "yes";
"guest ok" = "no";
"read only" = "no";
"force group" = "users";
};
in
{
bertof = recursiveUpdate common {
path = "/home/bertof/";
comment = "Bertof samba share";
"force user" = "bertof";
"valid users" = "bertof";
};
tiziano = recursiveUpdate common {
path = "/home/tiziano/";
comment = "Tiziano samba share";
"force user" = "tiziano";
"valid users" = "tiziano";
};
condiviso = recursiveUpdate common {
path = "/mnt/condiviso";
comment = "Samba share condiviso";
"valid users" = "bertof tiziano";
"create mask" = "0770";
"directory mask" = "2770";
"force create mode" = "0660";
"force directory mode" = "2770";
};
};
};
# samba = {
# enable = true;
# enableNmbd = true;
# enableWinbindd = true;
# nsswins = true;
# extraConfig = ''
# workgroup = WORKGROUP
# load printers = no
# smb encrypt = required
# '';
# shares =
# let
# common = {
# "public" = "no";
# "writeable" = "yes";
# "create mask" = "0700";
# "directory mask" = "2700";
# "browseable" = "yes";
# "guest ok" = "no";
# "read only" = "no";
# "force group" = "users";
# };
# in
# {
# bertof = recursiveUpdate common {
# path = "/home/bertof/";
# comment = "Bertof samba share";
# "force user" = "bertof";
# "valid users" = "bertof";
# };
# tiziano = recursiveUpdate common {
# path = "/home/tiziano/";
# comment = "Tiziano samba share";
# "force user" = "tiziano";
# "valid users" = "tiziano";
# };
# condiviso = recursiveUpdate common {
# path = "/mnt/condiviso";
# comment = "Samba share condiviso";
# "valid users" = "bertof tiziano";
# "create mask" = "0770";
# "directory mask" = "2770";
# "force create mode" = "0660";
# "force directory mode" = "2770";
# };
# };
# };
smartd.enable = true;
sonarr = { enable = true; openFirewall = true; group = "users"; };
# sonarr = { enable = true; openFirewall = true; group = "users"; };
thermald.enable = true;
transmission = {
enable = true;
openFirewall = true;
group = "users";
settings = {
download-dir = "/mnt/condiviso/Torrent";
incomplete-dir = "/mnt/condiviso/Torrent/.incomplete";
};
};
# transmission = {
# enable = true;
# openFirewall = true;
# group = "users";
# settings = {
# download-dir = "/mnt/condiviso/Torrent";
# incomplete-dir = "/mnt/condiviso/Torrent/.incomplete";
# };
# };
xserver = {
# enable = true;
# videoDrivers = [ "nvidia" ];