From 359258dcde95943c827540994c85f8add1ec51c0 Mon Sep 17 00:00:00 2001
From: fqbn207 <fqbn207>
Date: Thu, 9 Jan 2025 04:54:38 +0100
Subject: [PATCH] kekl

---
 configuration.nix          |  46 ++++++++++++++++++++++++++++++++++++
 hardware-configuration.nix |  47 +++++++++++++++++++++++++++++++++++++
 modules/.user.nix.swp      | Bin 0 -> 12288 bytes
 modules/iperf.nix          |   8 +++++++
 modules/jellyfin.nix       |   8 +++++++
 modules/networking.nix     |  13 ++++++++++
 modules/pkgs.nix           |  14 +++++++++++
 modules/sec.nix            |  15 ++++++++++++
 modules/user.nix           |   8 +++++++
 modules/virt.nix           |  12 ++++++++++
 10 files changed, 171 insertions(+)
 create mode 100644 configuration.nix
 create mode 100644 hardware-configuration.nix
 create mode 100644 modules/.user.nix.swp
 create mode 100644 modules/iperf.nix
 create mode 100644 modules/jellyfin.nix
 create mode 100644 modules/networking.nix
 create mode 100644 modules/pkgs.nix
 create mode 100644 modules/sec.nix
 create mode 100644 modules/user.nix
 create mode 100644 modules/virt.nix

diff --git a/configuration.nix b/configuration.nix
new file mode 100644
index 0000000..69c003f
--- /dev/null
+++ b/configuration.nix
@@ -0,0 +1,46 @@
+{ config, lib, pkgs, ... }:
+{
+  imports =
+    [
+      ./hardware-configuration.nix
+			
+			# modules
+			./modules/jellyfin.nix
+			./modules/iperf.nix
+			./modules/networking.nix
+			./modules/virt.nix
+			./modules/sec.nix
+			./modules/pkgs.nix
+			./modules/user.nix
+		];
+
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  time.timeZone = "Europe/Berlin";
+	
+	nixpkgs.config.allowUnfree = true;
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
+	
+  programs = { 
+		gnupg = {
+			agent = {
+				enable = true;
+				enableSSHSupport = true;
+			};
+		};
+	};
+	
+  services = {
+		openssh = {
+			enable = true;	
+		};	
+	};
+
+  system.stateVersion = "24.11";
+
+}
+
diff --git a/hardware-configuration.nix b/hardware-configuration.nix
new file mode 100644
index 0000000..637ebb4
--- /dev/null
+++ b/hardware-configuration.nix
@@ -0,0 +1,47 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems = {
+		"/boot" =
+			{ 
+				device = "/dev/disk/by-uuid/2742-5C4A";
+				fsType = "vfat";
+				options = [ "fmask=0022" "dmask=0022" ];
+			};
+		"/" = 
+			{
+				device = "/dev/disk/by-uuid/95ea99d1-a02f-48a2-803a-57c0c4993ec3";
+				fsType = "ext4";
+			};
+		"/media/MEDIA" = 
+			{
+				device = "/dev/disk/by-label/MEDIA";
+				fsType = "ext4";
+			};
+		"/media/WD_2TB" = 
+			{
+				device = "/dev/disk/by-label/WD_2TB";
+				fsType = "ext4";
+			};
+
+	};
+
+
+  swapDevices = [ ];
+
+  networking.useDHCP = lib.mkDefault true;
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}
diff --git a/modules/.user.nix.swp b/modules/.user.nix.swp
new file mode 100644
index 0000000000000000000000000000000000000000..8436af1f738de9bdafbacf3025e1f17c252e284d
GIT binary patch
literal 12288
zcmeI2!E4h{9LIn2WWhRdf=A!tVV9Y<3Zg3t;$e7jOrb*^1+yltVObLL5;u_8oBx2f
zq5sCtdh{fC@a#=I54;WbP1DxQrWJM@eqZ_Yz5af`_xj!^?V&VV^^Hf5)m^h8XqQCZ
zt@e8#WKEiNk*>AnT7H(8-2&Uu+L~RHWou5{srl|+pldsUop_F}CEAHhg#JC56*NEt
zr#Fzq-5YnRa_eRT-)xcV#-dud+&cYwoJj*TKm#;D12jMbG(ZD1aOMoe;hglb>vO}M
zpC9&ffAzzc>}Y@nXn+Q2fCgxQ255i=Xn+Q2fCkQ>0m~LyoELcxvj6`_zyE*X^-u5>
z9DsfB5^RF3_8Hg!Pr(zg4jzC7@cW|35AX%-gSVgs?t^RK3YZ5+RgpvR4IF@v;63OA
z54->mfeEgHDmc6#@*R8zp8y*T&;Sk401eOp4bT7$(7=CWAeBnm6ooeIlv-LU4dzv-
zE1NM$7BZ7HZIl!WMys`(rNOe=lERWudmKy0qd#ZM4>>iFX_(x4dSZ`-f{D^Wu24`I
zjt)H5tW+{3Jtdr7B(x;7t=Liblwr>*oRvGVNMLE@yHm=`!{yO@d*uRUm@Mvo@W$h%
z@<BSdXsMvXrO2H*dvRo~MnMv4oO)9kyRRI_GjRT(v+YC}xPF+#=tD2*+0JW2;loy`
zxV{^^mbY$cy&FV!W~_0$-Z1i2UA-1WJC@hNE%ZpmQQ}}yc0;{3^XL5jedOK<9;y@g
TUAMQa!tI`3R;FpHbVZH<sj}dk

literal 0
HcmV?d00001

diff --git a/modules/iperf.nix b/modules/iperf.nix
new file mode 100644
index 0000000..435b32d
--- /dev/null
+++ b/modules/iperf.nix
@@ -0,0 +1,8 @@
+{ config, pkgs, ... }:
+{
+	services = {
+		iperf3 = {
+			enable = true;
+		};
+	};
+}
diff --git a/modules/jellyfin.nix b/modules/jellyfin.nix
new file mode 100644
index 0000000..af6c9c4
--- /dev/null
+++ b/modules/jellyfin.nix
@@ -0,0 +1,8 @@
+{ config, pkgs, ... }:
+{
+	services = {
+		jellyfin = {
+			enable = true;
+		};
+	};
+}
diff --git a/modules/networking.nix b/modules/networking.nix
new file mode 100644
index 0000000..e84db3e
--- /dev/null
+++ b/modules/networking.nix
@@ -0,0 +1,13 @@
+{ config, pkgs, ... }:
+{
+	networking = {
+		hostName = "odessa";
+		networkmanager = {
+			enable = true;	
+		};
+		firewall = {
+			enable = true;
+			allowedTCPPorts = [ 80 443 1337 5021 8000 8080 ];
+		};
+	};
+}
diff --git a/modules/pkgs.nix b/modules/pkgs.nix
new file mode 100644
index 0000000..f2a5ac3
--- /dev/null
+++ b/modules/pkgs.nix
@@ -0,0 +1,14 @@
+{ config, pkgs, ... }:
+{
+	environment.systemPackages = with pkgs; [
+    vim
+		wget
+		neofetch
+		git
+		curl
+		unzip
+		htop
+		btop
+		iftop
+	];
+}
diff --git a/modules/sec.nix b/modules/sec.nix
new file mode 100644
index 0000000..abb5e56
--- /dev/null
+++ b/modules/sec.nix
@@ -0,0 +1,15 @@
+{ config, pkgs, ... }:
+{
+	security = {
+    doas = {
+      enable = true;
+      extraRules = [
+        {
+          users = [ "fabian" ];
+          noPass = true;
+          keepEnv = true;
+        }
+      ];
+    };
+  };
+}
diff --git a/modules/user.nix b/modules/user.nix
new file mode 100644
index 0000000..cf6f915
--- /dev/null
+++ b/modules/user.nix
@@ -0,0 +1,8 @@
+{ config, pkgs, ... }:
+{
+	users.users.fabian = {
+    isNormalUser = true;
+		initialPassword = "1601";
+    extraGroups = [ "wheel" "docker" "input" "plugdev" ];
+  };
+}
diff --git a/modules/virt.nix b/modules/virt.nix
new file mode 100644
index 0000000..c7c18fa
--- /dev/null
+++ b/modules/virt.nix
@@ -0,0 +1,12 @@
+{ config, pkgs, ... }:
+{
+	environment.systemPackages = with pkgs; [
+		docker-compose
+	];
+
+	virtualisation = {
+    docker = {
+      enable = true;
+    };
+  };
+}