refactor!: switch to dendritic pattern

BREAKING CHANGE: complete reorganization of the repository
2026-09-30 18:36:06 +02:00
parent 12684b4e9c
commit 5f4a7a4a42
323 changed files with 7117 additions and 7380 deletions
@@ -0,0 +1,50 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  lib,
+  modulesPath,
+  ...
+}: {
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+  ];
+
+  boot = {
+    initrd = {
+      availableKernelModules = ["ahci" "xhci_pci" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod"];
+      kernelModules = [];
+    };
+    kernelModules = [];
+    extraModulePackages = [];
+  };
+
+  fileSystems = {
+    "/" = {
+      device = "/dev/disk/by-uuid/28b965a5-940b-4990-87fe-039c9f373bf0";
+      fsType = "ext4";
+    };
+
+    "/boot" = {
+      device = "/dev/disk/by-uuid/EBAD-6B85";
+      fsType = "vfat";
+      options = ["fmask=0022" "dmask=0022"];
+    };
+
+    "/tank" = {
+      device = "/dev/disk/by-uuid/ed00871e-a14a-428f-b6e4-5b56febd756a";
+      fsType = "ext4";
+    };
+  };
+
+  swapDevices = [];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp1s0.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+}
@@ -0,0 +1,99 @@
+{
+  config,
+  inputs,
+  ...
+}: let
+  m = config.flake.modules.nixos;
+in {
+  flake-file.inputs.srvos = {
+    url = "github:nix-community/srvos";
+    inputs.nixpkgs.follows = "nixpkgs";
+  };
+
+  flake.modules.nixos.NaroMk3 = {...}: {
+    imports = [
+      inputs.srvos.nixosModules.server
+      inputs.srvos.nixosModules.hardware-hetzner-cloud
+      inputs.srvos.nixosModules.mixins-terminfo
+      ./_hardware.nix
+      m.system-default
+      m.kernel
+      m.hardened
+      m.loader
+      m.docker
+      m.endlessh
+      m.ssh
+    ];
+
+    mySystem = {
+      boot = {
+        kernel = {
+          hardened = true;
+          cpuVendor = "amd";
+        };
+        grub = {
+          enable = true;
+          device = "/dev/sdb";
+        };
+      };
+      dev.docker.enable = true;
+      misc.keymap = "fr-bepo";
+      networking = {
+        hostname = "NaroMk3";
+        id = "0003beef";
+        firewall = {
+          openPorts = [
+            22 # Gitea SSH
+            25 # SMTP
+            80 # HTTP
+            443 # HTTPS
+            465 # SMTPS
+            993 # IMAPS
+          ];
+        };
+      };
+      packages.nix.gc.automatic = true;
+      services = {
+        endlessh.enable = false;
+        ssh = {
+          enable = true;
+          allowedUsers = ["phundrak"];
+          passwordAuthentication = false;
+          port = 2222; # port 22 will be used by Gitea
+        };
+      };
+      users = {
+        root.disablePassword = true;
+        phundrak = {
+          enable = true;
+          trusted = true;
+        };
+      };
+    };
+
+    # This option defines the first version of NixOS you have installed
+    # on this particular machine, and is used to maintain compatibility
+    # with application data (e.g. databases) created on older NixOS
+    # versions.
+    #
+    # Most users should NEVER change this value after the initial
+    # install, for any reason, even if you've upgraded your system to a
+    # new NixOS release.
+    #
+    # This value does NOT affect the Nixpkgs version your packages and
+    # OS are pulled from, so changing it will NOT upgrade your system -
+    # see https://nixos.org/manual/nixos/stable/#sec-upgrading for how
+    # to actually do that.
+    #
+    # This value being lower than the current NixOS release does NOT
+    # mean your system is out of date, out of support, or vulnerable.
+    #
+    # Do NOT change this value unless you have manually inspected all
+    # the changes it would make to your configuration, and migrated your
+    # data accordingly.
+    #
+    # For more information, see `man configuration.nix` or
+    # https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion
+    system.stateVersion = "25.05"; # Did you read the comment?
+  };
+}