hosts/utm/configuration.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52

{
  modulesPath,
  lib,
  pkgs,
  self,
  ...
}:
{
  imports = [
    (modulesPath + "/installer/scan/not-detected.nix")
    "${self}/modules/base/sops.nix"
  ];

  disko.devices.disk.disk1.device = "/dev/vda";

  boot.loader.grub = {
    efiSupport = true;
    efiInstallAsRemovable = true;
  };

  environment.systemPackages =
    with pkgs;
    map lib.lowPrio [
      curl
      gitMinimal
    ];

  virtualisation.rosetta.enable = true;
  networking.hostName = "utm-vm-nixos-builder";

  services = {
    openssh.enable = true;

    avahi = {
      enable = true;
      nssmdns4 = true;
      openFirewall = true;

      publish = {
        enable = true;
        userServices = true;
        addresses = true;
      };
    };
  };

  users.users.root.openssh.authorizedKeys.keys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOeo/QyAKaDxiRah+Drf91P7jvw3uB3S28GlzrwHuE8k"
  ];

  system.stateVersion = "24.11";
}