From 8399441956ba3c7c968248891d65ced3b709856d Mon Sep 17 00:00:00 2001 From: Adrian Kummerlaender Date: Fri, 10 Jul 2026 15:24:55 +0200 Subject: wireguard: Move idefix to ChromeOS client --- host/hardware/idefix.nix | 50 ------------------------- host/idefix.nix | 75 -------------------------------------- host/software/server/wireguard.nix | 2 +- 3 files changed, 1 insertion(+), 126 deletions(-) delete mode 100644 host/hardware/idefix.nix delete mode 100644 host/idefix.nix (limited to 'host') diff --git a/host/hardware/idefix.nix b/host/hardware/idefix.nix deleted file mode 100644 index 73795f8..0000000 --- a/host/hardware/idefix.nix +++ /dev/null @@ -1,50 +0,0 @@ -# Do not modify this file! It was generated by ‘nixos-generate-config’ -# and may be overwritten by future invocations. Please make changes -# to /etc/nixos/configuration.nix instead. -{ config, lib, pkgs, modulesPath, ... }: - -{ - imports = - [ (modulesPath + "/installer/scan/not-detected.nix") - ]; - - boot = { - initrd = { - availableKernelModules = [ "ahci" "xhci_pci" "usb_storage" "sd_mod" "rtsx_usb_sdmmc" ]; - kernelModules = [ ]; - secrets = { - "/crypto_keyfile.bin" = null; - }; - # Enable swap on luks - luks.devices."luks-d66399c9-3eb8-4ebc-9855-9aae346feabf".device = "/dev/disk/by-uuid/d66399c9-3eb8-4ebc-9855-9aae346feabf"; - luks.devices."luks-d66399c9-3eb8-4ebc-9855-9aae346feabf".keyFile = "/crypto_keyfile.bin"; - luks.devices."luks-1747c7bf-b0e6-4202-8e00-393c0e5a01f2".device = "/dev/disk/by-uuid/1747c7bf-b0e6-4202-8e00-393c0e5a01f2"; - }; - kernelModules = [ "kvm-intel" ]; - extraModulePackages = [ ]; - loader = { - systemd-boot.enable = true; - efi.canTouchEfiVariables = true; - efi.efiSysMountPoint = "/boot/efi"; - }; - }; - - fileSystems."/" = - { device = "/dev/disk/by-uuid/a368ee22-54d1-45ff-b61b-529b9b438e52"; - fsType = "ext4"; - }; - - - fileSystems."/boot/efi" = - { device = "/dev/disk/by-uuid/F393-BC14"; - fsType = "vfat"; - }; - - swapDevices = - [ { device = "/dev/disk/by-uuid/51ac8775-7ff6-4869-addb-fe139198e7c8"; } - ]; - - hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; - - hardware.bluetooth.enable = true; -} diff --git a/host/idefix.nix b/host/idefix.nix deleted file mode 100644 index 017aa1d..0000000 --- a/host/idefix.nix +++ /dev/null @@ -1,75 +0,0 @@ -{ pkgs, ... }: - -{ - imports = [ - ./hardware/idefix.nix - ./software/desktop - ]; - - console.keyMap = pkgs.lib.mkForce "us"; - - networking = { - hostName = "idefix"; - firewall.enable = false; - networkmanager.enable = true; - }; - - users.extraUsers.common.extraGroups = [ "networkmanager" ]; - - services = { - upower.enable = true; - acpid.enable = true; - blueman.enable = true; - }; - - powerManagement.powertop.enable = true; - - services.xserver = { - layout = pkgs.lib.mkForce "us"; - xkbVariant = pkgs.lib.mkForce ""; - - libinput.enable = true; - - displayManager.gdm.enable = true; - desktopManager.gnome.enable = true; - }; - - environment.gnome.excludePackages = (with pkgs; [ - gnome-photos - gnome-tour - ]) ++ (with pkgs.gnome; [ - cheese - gnome-music - simple-scan - geary - tali - iagno - hitori - atomix - ]); - - environment.systemPackages = with pkgs.gnomeExtensions; [ - gesture-improvements - pop-shell - ]; - - networking.wireguard.interfaces = { - wg0 = { - ips = [ "10.100.0.8/24" ]; - - privateKeyFile = "/etc/wireguard/private"; - - peers = [ - { # automatix - publicKey = "B0tkjq+5SfECKx1gWEP5JVWOIaRWL2JNE7iSpMmN4F0="; - allowedIPs = [ "10.100.0.0/24" ]; - endpoint = "kummerlaender.eu:54321"; - - persistentKeepalive = 10; - } - ]; - }; - }; - - system.stateVersion = "22.05"; -} diff --git a/host/software/server/wireguard.nix b/host/software/server/wireguard.nix index 544aa53..3b6cf28 100644 --- a/host/software/server/wireguard.nix +++ b/host/software/server/wireguard.nix @@ -31,7 +31,7 @@ allowedIPs = [ "10.100.0.7" ]; } { # idefix - publicKey = "4Q1Glnceec8FOtkq8UnaYtlwsR1VIvs6lTalavNQp0A="; + publicKey = "To6F7vHeC4ujcH6E4RcrjNp4q9hFR36pzRnLTl/qGwo="; allowedIPs = [ "10.100.0.8" ]; } ]; -- cgit v1.2.3