finn.markwitzandClaude Sonnet 5
4de92dcbe8
autoUpgrade was silently failing daily on both hosts (legacy channel path, no --flake set) without reaching the network — disabled outright since rebuilds should only happen manually. Separately, nix-gc.timer's nightly sweep was deleting eval-time-only flake input sources (not part of the runtime closure), forcing the next evaluation to cold-refetch hermes-agent's entire dependency tree from GitHub in one burst, which alone was enough to hit the unauthenticated codeload rate limit. keep-outputs/keep-derivations stop GC from evicting those sources. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TJS8qsYPXSUm5mdWGdaHjF
81 lines
2.0 KiB
Nix
81 lines
2.0 KiB
Nix
{
|
|
config,
|
|
pkgs,
|
|
lib,
|
|
...
|
|
}:
|
|
{
|
|
imports = [
|
|
|
|
./disks.nix
|
|
./hardware-configuration.nix
|
|
./environments.nix
|
|
./network.nix
|
|
];
|
|
|
|
networking.hostName = "jupiter";
|
|
|
|
boot.loader.systemd-boot.enable = true;
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
boot.kernelPackages = pkgs.linuxPackages;
|
|
|
|
# Shitfuck SOnar Dotnet dependency
|
|
nixpkgs.config = {
|
|
permittedInsecurePackages = [
|
|
"aspnetcore-runtime-6.0.36"
|
|
"aspnetcore-runtime-wrapped-6.0.36"
|
|
"dotnet-sdk-6.0.428"
|
|
"dotnet-sdk-wrapped-6.0.428"
|
|
];
|
|
};
|
|
|
|
services.openssh.enable = true;
|
|
|
|
# Configure keymap in X11
|
|
services.xserver.xkb = {
|
|
layout = "de";
|
|
variant = "";
|
|
};
|
|
|
|
# Configure console keymap
|
|
console.keyMap = "de";
|
|
|
|
# Enable CUPS to print documents.
|
|
services.printing.enable = true;
|
|
services.fwupd.enable = true;
|
|
|
|
security.rtkit.enable = true;
|
|
|
|
# Try fix wifi disconnect
|
|
networking.networkmanager.wifi.powersave = false;
|
|
|
|
# Disable hibernate and suspend completely - this is a headless server.
|
|
# The board exposes a phantom ACPI lid switch (PNP0C0D) that fires a
|
|
# "closed" event when the HDMI cable is unplugged, which used to trigger
|
|
# a real suspend via logind's default HandleLidSwitch=suspend.
|
|
powerManagement.enable = true;
|
|
systemd.targets."hibernate".enable = false;
|
|
systemd.targets."hybrid-sleep".enable = false;
|
|
systemd.targets."suspend-then-hibernate".enable = false;
|
|
systemd.targets."suspend".enable = false;
|
|
systemd.targets."sleep".enable = false;
|
|
|
|
services.logind.settings.Login = {
|
|
HandleLidSwitch = "ignore";
|
|
HandleLidSwitchExternalPower = "ignore";
|
|
HandleLidSwitchDocked = "ignore";
|
|
};
|
|
|
|
# Optional: kernel parameter to fully disable hibernation
|
|
boot.kernelParams = [ "nohibernate" ];
|
|
|
|
|
|
system = {
|
|
stateVersion = "23.05";
|
|
# Was silently failing daily (legacy channel path, no --flake set) without
|
|
# ever reaching the network. Disabled rather than fixed: rebuilds should
|
|
# only happen when triggered manually.
|
|
autoUpgrade.enable = false;
|
|
};
|
|
}
|