nrabulinski/settei
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

treewide: fix darwin configs

Browse source
This commit is contained in:
Nikodem Rabuliński 2024-06-13 14:58:32 +02:00
parent de9b2d73e9
commit 2f16de8f02
2 changed files with 75 additions and 64 deletions
Download patch file Download diff file Expand all files Collapse all files

17
hosts/default.nix
View file

@ -16,7 +16,8 @@
./kogata
];
builders = let
builders =
let
sharedOptions = {
_file = ./default.nix;
@ -53,21 +54,25 @@
];
specialArgs.configurationName = "base";
};
in {
in
{
nixos =
name: module:
baseNixos.extendModules {
modules = [
module
];
modules = [ module ];
specialArgs.configurationName = name;
};
darwin =
name: module:
baseDarwin.extendModules {
let
eval = baseDarwin._module.args.extendModules {
modules = [ module ];
specialArgs.configurationName = name;
};
in
{
system = eval.config.system.build.toplevel;
};
};
}

12
modules/system/settei/sane-defaults.nix
View file

@ -29,7 +29,6 @@ let
# FIXME: Move to common
services.tailscale.enable = true;
networking.firewall.trustedInterfaces = [ "tailscale0" ];
networking.hostName = lib.mkDefault (
args.configurationName
@ -83,10 +82,15 @@ let
linuxConfig = lib.optionalAttrs isLinux (
let
nmEnabled = config.networking.networkmanager.enable;
tlEnabled = config.services.tailscale.enable;
in
lib.mkMerge [
{
hardware.enableRedistributableFirmware = true;
# FIXME: Move to common
networking.firewall.trustedInterfaces = lib.mkIf tlEnabled [ "tailscale0" ];
services.openssh.enable = true;
programs.mosh.enable = lib.mkDefault true;
programs.git.enable = lib.mkDefault true;
@ -105,10 +109,11 @@ let
# TODO: Actually this should be extraRules which makes wheel users without any password set
# be able to use sudo with no password
security.sudo.wheelNeedsPassword = false;
}
{
# When NetworkManager isn't in use, add tailscale DNS address manually
# FIXME: Move to common
networking = lib.mkIf (!nmEnabled && config.services.tailscale.enable && cfg.tailnet != null) {
networking = lib.mkIf (!nmEnabled && tlEnabled && cfg.tailnet != null) {
nameservers = [
"100.100.100.100"
"1.1.1.1"
@ -120,6 +125,7 @@ let
# NetworkManager probably means desktop system so we don't want to slow down boot times
systemd.services = lib.mkIf nmEnabled { NetworkManager-wait-online.enable = false; };
}
]
);
darwinConfig = lib.optionalAttrs (!isLinux) {