foo

hosts/common-vm.nix

@@ -0,0 +1,31 @@
+{ ... }:
+
+{
+  boot = {}; # TODO: add kernel modules
+
+  fileSystems = {
+    "/" = {
+      device = "/dev/disk/by-label/ROOT";
+      fsType = "ext4";
+      options = [ "discard" "noatime" ];
+    };
+    "/boot" = {
+      device = "/dev/disk/by-label/BOOT";
+      fsType = "vfat";
+      options = [ "fmask=0022" "dmask=0022" "discard" "noatime" ];
+    };
+  };
+
+  #swapDevices = [{ device = "/dev/disk/by-label/SWAP"; }];
+
+  networking = {
+    domain = "k8s.xengi.de";
+    defaultGateway6 = {
+      address = "2a00:1328:e101:1300::1"; # TODO: use host network
+      interface = "ens3"; # TODO: use correct interface name
+    };
+  };
+
+  virtualisation.qemu.guestAgent.enable = true;
+}
+

hosts/common.nix

@@ -1,9 +1,21 @@
 { config, lib, pkgs, ... }:
 
 {
+  nix = {
+    optimise = {
+      automatic = true;
+    };
+    settings = {
+      auto-optimise-store = true;
+      experimental-features = [ "nix-command" "flakes" ];
+    };
+    gc = {
+      automatic = true;
+      options = "--delete-older-than 7d";
+    };
+  };
+
   boot = {
-    initrd.availableKernelModules = [ "ahci" "xhci_pci" "ehci_pci" "megaraid_sas" "nvme" "usbhid" "usb_storage" "sd_mod" "sr_mod" ];
-    kernelModules = [ "kvm-intel" ];
     loader = {
       systemd-boot.enable = true;
       efi.canTouchEfiVariables = true;
@@ -11,23 +23,34 @@
     kernelPackages = pkgs.linuxPackages_latest;
   };
 
-  fileSystems = {
-    "/" = {
-      device = "/dev/disk/by-label/ROOT";
-      fsType = "ext4";
-      options = [ "discard" "noatime" ];
-    };
-    "/boot" = {
-      device = "/dev/disk/by-label/BOOT";
-      fsType = "vfat";
-      options = [ "fmask=0022" "dmask=0022" "discard" "noatime" ];
-    };
+  networking = {
+    search = [ "xengi.de" ];
+    useNetworkd = true;
+    nftables.enable = true;
+    dhcpcd.enable = false;
+    useDHCP = false;
+    nameservers = [
+      "2606:4700:4700::1111#one.one.one.one"
+      "2620:fe::fe#dns.quad9.net"
+    ];
+    firewall.enable = true;
   };
 
-  swapDevices = [];
+  services.resolved = {
+    enable = true;
+    fallbackDns = [
+      "1.1.1.1#one.one.one.one"
+      "9.9.9.9#dns.quad9.net"
+    ];
+    llmnr = "false";
+    extraConfig = ''
+      MulticastDNS=false
+    '';
+    dnssec = "allow-downgrade";
+    dnsovertls = "true"; #"opportunistic";
+  };
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
 
   time.timeZone = "Europe/Berlin";
 
@@ -36,6 +59,7 @@
     useXkbConfig= true;
   };
 
+<<<<<<< HEAD
   users.users.root.openssh.authorizedKeys.keys = [
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICW1+Ml8R9x1LCJaZ8bIZ1qIV4HCuZ6x7DziFW+0Nn5T xengi@kanae_2022-12-09"
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICmb+mJfo84IagUaRoDEqY9ROjjQUOQ7tMclpN6NDPrX xengi@kota_2022-01-16"
@@ -50,5 +74,34 @@
     vim
   ];
 
+  programs = {
+    vim = {
+      enable = true;
+      defaultEditor = true;
+    };
+    mtr.enable = true;
+    htop = {
+      enable = true;
+      settings = {
+        highlight_base_name = true;
+        show_cpu_frequency = true;
+        show_cpu_temperature = true;
+        update_process_names = true;
+        color_scheme = "6";
+      };
+    };
+    tmux = {
+      enable = true;
+      terminal = "screen-256color";
+      shortcut = "a";
+      plugins = with pkgs.tmuxPlugins; [ sensible ];
+      newSession = true;
+      historyLimit = 10000;
+      clock24 = true;
+    };
+  };
+
+  security.sudo.execWheelOnly = true;
+
   system.stateVersion = "26.05";
 }

hosts/control-plane-01/default.nix

@@ -0,0 +1,13 @@
+{ ... }:
+
+{
+  imports = [
+    ../common.nix
+    ../common-vm.nix
+    ../../services/openssh.nix
+    ../../services/etcd.nix
+  ];
+
+  nix.optimise.dates = [ "01:00" ];
+}
+

hosts/control-plane-02/default.nix

@@ -0,0 +1,13 @@
+{ ... }:
+
+{
+  imports = [
+    ../common.nix
+    ../common-vm.nix
+    ../../services/openssh.nix
+    ../../services/etcd.nix
+  ];
+
+  nix.optimise.dates = [ "02:00" ];
+}
+

hosts/control-plane-03/default.nix

@@ -0,0 +1,13 @@
+{ ... }:
+
+{
+  imports = [
+    ../common.nix
+    ../common-vm.nix
+    ../../services/openssh.nix
+    ../../services/etcd.nix
+  ];
+
+  nix.optimise.dates = [ "03:00" ];
+}
+

hosts/kaede/default.nix

@@ -1,12 +1,87 @@
-{ ... }:
+{ config, lib, pkgs, ... }:
 
 {
   imports = [
+<<<<<<< HEAD
     ./base.nix
     ./hardware.nix
     ./networking.nix
     ./users.nix
     ./programs.nix
     ./services.nix
+    ../../services/openssh.nix
   ];
+
+  nix.optimise.dates = [ "00:00" ];
+
+  boot = {
+    initrd.availableKernelModules = [ "ahci" "xhci_pci" "ehci_pci" "megaraid_sas" "nvme" "usbhid" "usb_storage" "sd_mod" "sr_mod" ];
+    kernelModules = [ "kvm-intel" ];
+    swraid = {
+      enable = true;
+      mdadmConf = ''
+        ARRAY /dev/md/ROOT metadata=1.2 UUID=acd8260f-e30f-2f3f-74f7-e51ee905a498
+        MAILADDR root@localhost
+      '';
+    };
+    #kernel.sysctl = {
+    #  "net.ipv4.ip_forward" = true;
+    #  "net.ipv4.conf.all.forwarding" = true;
+    #};
+  };
+
+  networking = {
+    hostName = "kaede";
+    domain = "xengi.de";
+    search = [ "xengi.de" ];
+    defaultGateway6 = {
+      address = "2a00:1328:e100:1::6c";
+      interface = "eno3";
+    };
+    defaultGateway = {
+      address = "217.115.0.182";
+      interface = "eno3";
+    };
+    interfaces.eno3 = {
+      ipv6.addresses = [{ address = "2a00:1328:e100:1::6d"; prefixLength = 127; }];
+      ipv4.addresses = [{ address = "217.115.0.183"; prefixLength = 31; }];
+    };
+  };
+
+  fileSystems = {
+    "/" = {
+      device = "/dev/disk/by-uuid/e44cfa13-868e-4d26-b3de-5a8ae92bb055";
+      fsType = "ext4";
+      options = [ "discard" "noatime" ];
+    };
+    "/boot" = {
+      device = "/dev/disk/by-uuid/AD5C-950B";
+      fsType = "vfat";
+      options = [ "fmask=0022" "dmask=0022" "discard" "noatime" ];
+    };
+  };
+
+  swapDevices = [
+    { device = "/dev/disk/by-uuid/e8825b01-f91e-4c4f-8916-bffeb6fac0cd"; }
+    { device = "/dev/disk/by-uuid/5b53c0b9-ab57-4992-8e81-957e19c7b685"; }
+  ];
+
+  virtualisation.libvirtd = {
+    enable = true;
+    nss.enableGuest = true;
+    startDelay = 1;
+    onShutdown = "shutdown";
+  };
+
+  services.openssh.banner  = ''
+             __    __         __
+           /'__`\ /\ \      /'_ `\
+      ___ /\_\L\ \\ \ \/'\ /\ \L\ \    ____
+     /'___\/_/_\_<_\ \ , < \/_> _ <_  /',__\
+    /\ \__/ /\ \L\ \\ \ \\`\ /\ \L\ \/\__, `\
+    \ \____\\ \____/ \ \_\ \_\ \____/\/\____/
+     \/____/ \/___/   \/_/\/_/\/___/  \/___/
+  '';
+
+  system.stateVersion = "25.11";
 }

hosts/worker-01/default.nix

@@ -0,0 +1,13 @@
+{ ... }:
+
+{
+  imports = [
+    ../common.nix
+    ../common-vm.nix
+    ../../services/openssh.nix
+    ../../services/etcd.nix
+  ];
+
+  nix.optimise.dates = [ "04:00" ];
+}
+

hosts/worker-02/default.nix

@@ -0,0 +1,13 @@
+{ ... }:
+
+{
+  imports = [
+    ../common.nix
+    ../common-vm.nix
+    ../../services/openssh.nix
+    ../../services/etcd.nix
+  ];
+
+  nix.optimise.dates = [ "05:00" ];
+}
+

hosts/worker-03/default.nix

@@ -0,0 +1,13 @@
+{ ... }:
+
+{
+  imports = [
+    ../common.nix
+    ../common-vm.nix
+    ../../services/openssh.nix
+    ../../services/etcd.nix
+  ];
+
+  nix.optimise.dates = [ "06:00" ];
+}
+

hosts/worker-04/default.nix

@@ -0,0 +1,13 @@
+{ ... }:
+
+{
+  imports = [
+    ../common.nix
+    ../common-vm.nix
+    ../../services/openssh.nix
+    ../../services/etcd.nix
+  ];
+
+  nix.optimise.dates = [ "07:00" ];
+}
+

hosts/worker-05/default.nix

@@ -0,0 +1,13 @@
+{ ... }:
+
+{
+  imports = [
+    ../common.nix
+    ../common-vm.nix
+    ../../services/openssh.nix
+    ../../services/etcd.nix
+  ];
+
+  nix.optimise.dates = [ "08:00" ];
+}
+