Refactored pi

rasmus-kirk · Sep 20, 2024 · 6b82a6e · 6b82a6e
1 parent d5f3124
commit 6b82a6e
Show file tree

Hide file tree

Showing 6 changed files with 4 additions and 82 deletions.
diff --git a/configurations/nixos/pi/configuration.nix b/configurations/nixos/pi/configuration.nix
@@ -1,18 +1,12 @@
 { inputs, config, pkgs, ... }:
 let
-  # This is dumb, but it works. Nix caches failures so changing this unbound
-  # variable to anything else forces a rebuild
-  force-rebuild = 0;
   machine = "pi";
   username = "user";
   dataDir = "/data";
   configDir = "${dataDir}/.system-configuration";
   secretDir = "${dataDir}/.secret";
   stateDir = "${dataDir}/.state";
 
-  vpntestPort = 24745;
-  xmrP2PPort = 8001; # 24746;
-  xmrRpcPort = 8000; # 24747;
   transmissionPort = 33915;
 in {
   # Load secrets
@@ -41,10 +35,7 @@ in {
 
     vpn = {
       enable = true;
-      vpnTestService = {
-        enable = true;
-        #port = vpntestPort;
-      };
+      vpnTestService.enable = true;
       wgConf = config.age.secrets."airvpn-wg.conf".path;
     };
 
@@ -76,15 +67,6 @@ in {
         download-queue-enabled = true;
         download-queue-size = 3;
       };
-      privateTrackers = {
-        cross-seed = {
-          enable = false;
-          indexIds = [
-            3  # DB
-            10 # AB
-          ];
-        };
-      };
     };
 
     sonarr.enable = true;
@@ -100,12 +82,6 @@ in {
   };
 
   hardware.raspberry-pi."4" = {
-    # disable LEDS
-    leds = {
-      #eth.disable = true;
-      #act.disable = true;
-      #pwr.disable = true;
-    };
     # Enable some HW-acceleration, idk
     fkms-3d.enable = true;
   };
@@ -129,85 +105,35 @@ in {
       overrideDevices = false;
       overrideFolders = false;
     };
-
-    monero = {
-      enable = false;
-      dataDir = "${stateDir}/monero";
-      extraConfig = ''
-        p2p-bind-ip=0.0.0.0
-        p2p-bind-port=${builtins.toString xmrP2PPort}
-
-        rpc-restricted-bind-ip=0.0.0.0
-        rpc-restricted-bind-port=${builtins.toString xmrRpcPort}
-
-        # Disable UPnP port mapping
-        no-igd=1
-
-        # Public-node
-        public-node=1
-
-        # ZMQ configuration
-        no-zmq=1
-
-        # Block known-malicious nodes from a DNSBL
-        enable-dns-blocklist=1
-      '';
-    };
   };
 
   networking = {
-    nameservers = [ 
-      # "91.239.100.100" # Uncensored DNS
-      # "1.1.1.2" # Cloudflare
-    ];
     hostName = machine;
-    firewall.allowedTCPPorts = [
-      xmrP2PPort
-      xmrRpcPort
-    ];
     wireless = {
       enable = true;
       environmentFile = config.age.secrets.wifi.path;
-      networks = {
-        "dd-wrt" = { psk = "@HOME@"; };
-      };
+      networks."dd-wrt" = { psk = "@HOME@"; };
     };
   };
 
   users = {
     mutableUsers = false;
-    users.git = {
-      isNormalUser = true;
-      hashedPasswordFile = config.age.secrets.user.path;
-      group = "git";
-      home = "${stateDir}/git";
-    };
     users."${username}" = {
       shell = pkgs.zsh;
       isNormalUser = true;
       hashedPasswordFile = config.age.secrets.user.path;
       extraGroups = [ "wheel" ];
     };
-    groups.git = {};
   };
 
-  systemd.tmpfiles.rules = [
-    # Media dirs
-    "d /data/git 0700 git git - -"
-  ];
-
   services.openssh = {
     enable = true;
     openFirewall = true;
     settings.PasswordAuthentication = false;
     ports = [ 6000 ];
   };
   users.extraUsers."${username}".openssh.authorizedKeys.keyFiles = [
-    ./pubkeys/work.pub
-  ];
-  users.extraUsers.git.openssh.authorizedKeys.keyFiles = [
-    ./pubkeys/work.pub
-    ./pubkeys/pi.pub
+    ../../../pubkeys/work.pub
   ];
 
   # Autologin

diff --git a/configurations/nixos/pi/pubkeys/steam-deck.pub b/configurations/nixos/pi/pubkeys/steam-deck.pub
diff --git a/configurations/nixos/pi/pubkeys/work.pub b/configurations/nixos/pi/pubkeys/work.pub
diff --git a/pubkeys/laptop.pub b/pubkeys/laptop.pub
diff --git a/configurations/nixos/pi/pubkeys/pi.pub → pubkeys/pi.pub b/configurations/nixos/pi/pubkeys/pi.pub → pubkeys/pi.pub
diff --git a/pubkeys/steam-deck.pub b/pubkeys/steam-deck.pub
@@ -1 +1 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKYst7Xgyn1xNq03lAvP2UOavuSNPwqGPpFInKz6/99p user@deck
+ssh-rsa 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 user@laptop