xin/hosts/tv/default.nix
Aaron Bieber a0cc81634d
hosts/tv: switch to unstable
- poke holes in tailnet
- use real hardware config
2024-05-28 11:44:27 -06:00

83 lines
1.4 KiB
Nix

{ pkgs
, config
, ...
}:
let
pubKeys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO7v+/xS8832iMqJHCWsxUZ8zYoMWoZhjj++e26g1fLT europa"
] ++ config.myconf.managementPubKeys;
myKodi = pkgs.kodi.withPackages (kp: [
kp.somafm
kp.jellyfin
kp.invidious
kp.infotagger
kp.certifi
kp.jellycon
kp.requests
]);
in
{
_module.args.isUnstable = true;
imports = [
./hardware-configuration.nix
];
boot = {
loader = {
systemd-boot.enable = true;
efi.canTouchEfiVariables = true;
};
kernelPackages = pkgs.linuxPackages_latest;
};
networking = {
hostName = "tv";
networkmanager.enable = true;
firewall = {
enable = true;
allowedTCPPorts = [ 22 ];
checkReversePath = "loose";
};
};
services = {
fwupd = {
enable = true;
};
xserver = {
libinput.enable = true;
enable = true;
desktopManager = {
kodi = {
enable = true;
package = myKodi;
};
};
displayManager = {
autoLogin = {
user = "tv";
enable = true;
};
};
videoDrivers = [ "intel" ];
};
};
users = {
users = {
root = { openssh.authorizedKeys.keys = pubKeys; };
tv = {
openssh.authorizedKeys.keys = pubKeys;
isNormalUser = true;
};
};
};
system = {
stateVersion = "22.11";
};
}