「🎉」 init(quantum-moon): new host (minecraft server)

hosts/default.nix

@@ -23,6 +23,16 @@ in
     ./atrebois
     ./rocaille
     ./cravite
+    #./timber-hearth #atrebois
+    #./attlerock #rocaille
+    #./brittle-hollow #cravite
+    #./hollows-lantern #lanterne
+    #./giants-deep #leviathe
+    #./ash-twin #sablière rouge
+    #./ember-twin #sablière noire
+    #./dark-bramble #sombronce
+    ./quantum-moon #lune quantique
+    #./interloper #l'intrus
   ];
 
   _module.args = {

hosts/quantum-moon/cfg.nix

@@ -0,0 +1,13 @@
+{ lib, pkgs, inputs, ... }:
+let
+  inherit (inputs.self.lib.sshKeys.shakoh.toQuantumMoon) atrebois rocaille;
+in
+{
+  boot.kernelPackages = lib.mkDefault pkgs.linuxKernel.packages.linux_hardened;
+  networking = {
+    hostName = "quantum-moon";
+    useDHCP = lib.mkDefault true;
+    firewall.enable = false; # Use Hetzner's firewall
+  };
+  users.users.shakoh.openssh.authorizedKeys.keys = [ atrebois rocaille ];
+}

hosts/quantum-moon/default.nix

@@ -0,0 +1,21 @@
+{
+  config,
+  mkNixos,
+  withSystem,
+  ...
+}:
+let
+  inherit (config.flake) nixosModules;
+in
+{
+  flake.nixosConfigurations.quantum-moon = withSystem "aarch64-linux" ({ ... }:
+    mkNixos "aarch64-linux" [
+      ./cfg.nix
+      ./hw.nix
+
+      nixosModules.docker
+      nixosModules.nix
+      nixosModules.notre-minecraft
+    ]
+  );
+}

hosts/quantum-moon/home.nix

@@ -0,0 +1,5 @@
+{ pkgs, ... }:
+{
+  home.packages = with pkgs; [
+  ];
+}

hosts/quantum-moon/hw.nix

@@ -0,0 +1,38 @@
+{
+  lib,
+  modulesPath,
+  ...
+}:
+{
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+  ];
+
+  boot = {
+    kernelModules = [ ];
+    extraModulePackages = [ ];
+    initrd = {
+      availableKernelModules = [ "xhci_pci" "virtio_scsi" "sr_mod" ];
+      kernelModules = [ ];
+    };
+  };
+
+  fileSystems = {
+    "/" = {
+      device = "/dev/disk/by-uuid/41f54c37-06ee-40c7-a5e0-71df1d03c9b9";
+      fsType = "ext4";
+    };
+
+    "/boot" = {
+      device = "/dev/disk/by-uuid/7548-C81D";
+      fsType = "vfat";
+      options = [ "fmask=0022" "dmask=0022" ];
+    };
+  };
+
+  nixpkgs = {
+    hostPlatform = lib.mkDefault "aarch64-linux";
+    config.allowUnfree = true;
+  };
+  system.stateVersion = "24.05";
+}

lib/default.nix

@@ -13,6 +13,10 @@
           atrebois = "ssh-rsa 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 shakoh@atrebois";
           rocaille = "ssh-rsa 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 shakoh@rocaille"; # TODO
         };
+        toQuantumMoon = {
+          atrebois = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKcDQ3zh/EARJ4bojQxHHAOiLQmJcUU1j2/XSWE/B62E shakoh@atrebois";
+          rocaille = ""; #TODO
+        };
       };
     };
   };

modules/home-manager/common/default.nix

@@ -7,26 +7,33 @@
     compression = true;
     matchBlocks = {
       "atrebois" = {
-        hostname = "192.168.1.201";
         host = "atrebois";
+        hostname = "192.168.1.201";
         port = 72;
         user = "shakoh";
         identityFile = "~/.ssh/id_atrebois";
       };
       "rocaille" = {
-        hostname = "192.168.1.202";
         host = "rocaille";
+        hostname = "192.168.1.202";
         port = 72;
         user = "shakoh";
         identityFile = "~/.ssh/id_rocaille";
       };
       "cravite" = {
-        hostname = "192.168.1.253";
         host = "cravite";
+        hostname = "192.168.1.253";
         port = 72;
         user = "shakoh";
         identityFile = "~/.ssh/id_cravite";
       };
+      "notre-minecraft" = {
+        host = "notre-minecraft";
+        hostname = "notre-minecraft.shakoh.fr";
+        port = 72;
+        user = "shakoh";
+        identityFile = "~/.ssh/id_quantum-moon";
+      };
     };
   };
 }

modules/nixos/common/tweaks.nix

@@ -5,32 +5,22 @@
   };
 
   boot = {
-    kernelPackages = pkgs.linuxKernel.packages.linux_zen;
-    loader.efi.canTouchEfiVariables = true;
-    loader.systemd-boot = {
-      enable = true;
-      consoleMode = "max";
-    };
-    kernelParams = [
-      "mitigations=off"
-      "spectre_v2=off"
-    ];
-    kernelModules = [
-      "acpi-cpufreq"
-    ];
-    kernel.sysctl = {
-      "vm.max_map_count" = "16777216";
-    };
+    kernelParams = [ "mitigations=off" "spectre_v2=off" ];
     tmp.useTmpfs = true;
+    loader = {
+      efi.canTouchEfiVariables = true;
+      systemd-boot = {
+        enable = true;
+        consoleMode = "keep";
+      };
+    };
   };
 
   zramSwap.enable = true;
 
   services = {
     dbus.enable = true;
     dbus.implementation = "broker";
-    fstrim.enable = true;
-    upower.enable = true;
   };
 
   powerManagement.cpuFreqGovernor = "ondemand";

modules/nixos/default.nix

@@ -9,6 +9,7 @@
     gaming = ./gaming;
     intel = ./intel;
     nix = ./nix;
+    notre-minecraft = ./notre-minecraft;
     nvidia = ./nvidia;
     printing = ./printing;
     secrets = ./secrets;

modules/nixos/notre-minecraft/default.nix

@@ -0,0 +1,32 @@
+{ pkgs, ... }:
+{
+  virtualisation.oci-containers = {
+    backend = "docker";
+    containers = {
+      notre-minecraft = {
+        autoStart = true;
+        extraOptions = [ "--network=host" ];
+        environment = {
+          MEMORYSIZE = "12G";
+          #JAVAFLAGS = "";
+          #PAPERMC_FLAGS = "";
+        };
+        image = "ghcr.io/mtoensing/docker-minecraft-papermc-server";
+        imageFile = pkgs.dockerTools.pullImage {
+          imageName = "ghcr.io/mtoensing/docker-minecraft-papermc-server";
+          imageDigest = "sha256:6b4c8c6a29f92fdbb66499bc52f40f77118a4c6651d16c0adcbdcfa595c07129";
+          sha256 = "1wn9aa5hxqclzxa2bvxq5afc16jdxladnlff6l0p0ssd1n53jshp";
+          finalImageName = "ghcr.io/mtoensing/docker-minecraft-papermc-server";
+          finalImageTag = "latest";
+          os = "linux";
+          arch = "arm64";
+        };
+        volumes = [ "/var/notre-minecraft:/data:rw" ];
+        ports = [
+          "25565:25565/tcp"
+          "25565:25565/udp"
+        ];
+      };
+    };
+  };
+}

modules/nixos/secrets/default.nix

@@ -8,13 +8,9 @@
     inputs.ragenix.nixosModules.default
   ];
 
-  environment.systemPackages = [
-    inputs'.ragenix.packages.default
-  ];
-
   age.identityPaths = [
     "/etc/ssh/ssh_host_rsa_key"
-    "/home/shakoh/.ssh/id_secrets"
+    "/etc/ssh/ssh_host_ed25519_key"
   ];
 
   age.secrets = with inputs; {

users/shakoh/default.nix

@@ -29,5 +29,6 @@ in
     "shakoh@atrebois" = mkHome "x86_64-linux" [ ./atrebois.nix ];
     "shakoh@rocaille" = mkHome "x86_64-linux" [ ./rocaille.nix ];
     "shakoh@cravite" = mkHome "aarch64-linux" [ ./cravite.nix ];
+    "shakoh@quantum-moon" = mkHome "aarch64-linux" [ ./quantum-moon.nix ];
   };
 }

users/shakoh/quantum-moon.nix

@@ -0,0 +1,3 @@
+{ ... }:
+{
+}