75 lines
1.8 KiB
Nix
75 lines
1.8 KiB
Nix
# See the wiki for more details https://wiki.nixos.org/wiki/Creating_a_NixOS_live_CD
|
|
#
|
|
# Can be built with
|
|
# nix build .#nixosConfigurations.iso.config.system.build.isoImage
|
|
{
|
|
modulesPath,
|
|
inputs,
|
|
outputs,
|
|
pkgs,
|
|
...
|
|
}:
|
|
{
|
|
# {{{ Imports
|
|
imports = builtins.attrValues outputs.nixosModules ++ [
|
|
"${modulesPath}/installer/cd-dvd/installation-cd-minimal.nix"
|
|
|
|
inputs.sops-nix.nixosModules.sops
|
|
|
|
../common/global/cli/fish.nix
|
|
../common/optional/services/wpa_supplicant.nix
|
|
../common/optional/services/kanata.nix
|
|
];
|
|
# }}}
|
|
# {{{ Automount hermes
|
|
fileSystems."/hermes" = {
|
|
device = "/dev/disk/by-uuid/41311200-3403-4324-9ad3-4fc45a061152";
|
|
neededForBoot = true;
|
|
options = [
|
|
"nofail"
|
|
"x-systemd.automount"
|
|
];
|
|
};
|
|
# }}}
|
|
# {{{ Nix config
|
|
nix = {
|
|
# Flake support and whatnot
|
|
package = pkgs.lix;
|
|
|
|
# Enable flakes and new 'nix' command
|
|
settings.experimental-features = [
|
|
"nix-command"
|
|
"flakes"
|
|
];
|
|
};
|
|
# }}}
|
|
# {{{ SSH keys
|
|
users.users.pilot.openssh.authorizedKeys.keyFiles = [
|
|
../calypso/keys/id_ed25519.pub
|
|
../lapetus/keys/id_ed25519.pub
|
|
../tethys/keys/id_ed25519.pub
|
|
];
|
|
# }}}
|
|
# {{{ Install some packages
|
|
environment.systemPackages =
|
|
let
|
|
cloneConfig = pkgs.writeShellScriptBin "liftoff" ''
|
|
git clone git@github.com:prescientmoon/everything-nix.git
|
|
cd everything-nix
|
|
'';
|
|
in
|
|
with pkgs;
|
|
[
|
|
sops # Secret editing
|
|
neovim # Text editor
|
|
cloneConfig # Clones my nixos config from github
|
|
];
|
|
# }}}
|
|
|
|
# Tell sops-nix to use the hermes keys for decrypting secrets
|
|
sops.age.sshKeyPaths = [ "/hermes/secrets/hermes/ssh_host_ed25519_key" ];
|
|
|
|
# Fast but bad compression
|
|
# isoImage.squashfsCompression = "gzip -Xcompression-level 1";
|
|
}
|