nixos-config/config/nixos-8gb-fsn1-1.nix

{
  lib,
  modulesPath,
  pkgs,
  config,
  system,
  ...
} @ args: {
  networking.hostName = "nixos-8gb-fsn1-1";
  networking.hostId = "73561e1f";

  imports = [
    (modulesPath + "/profiles/qemu-guest.nix")
    ./grub.nix
    ./server.nix
    ./services/named.nix
    ./services/grafana.nix
    ./users/miifox.nix
    ./services/postgres.nix
    ./services/gitea.nix
    ./services/old-homepage.nix
    ./services/postfixadmin.nix
    ./services/dovecot.nix
    ./services/postfix.nix
    ./services/reverse-proxy.nix
    ./services/matrix-media-repo.nix
    ./bittorrent-blocker.nix
    ./services/akkoma
    ./services/peertube
    ./services/rspamd.nix
    ./wireguard/public-server.nix
    ./services/shitalloverme.nix
    ./services/initrd-ssh.nix
    ./wireguard
    ./zfs.nix
  ];

  boot.initrd.availableKernelModules = ["ata_piix" "virtio_pci" "virtio_scsi" "xhci_pci" "sd_mod" "sr_mod"];
  boot.initrd.kernelModules = [];
  boot.kernelModules = [];
  boot.extraModulePackages = [];
  boot.supportedFilesystems = ["zfs"];
  boot.loader.grub.devices = ["/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_16151622"];
  boot.loader.timeout = 5;
  boot.initrd.luks.devices = {
    disk0 = {
      device = "/dev/disk/by-partuuid/29ccd4c9-5ef5-a146-8e42-9244f712baca";
    };
  };

  fileSystems."/" = {
    device = "tank/nixos";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/nix" = {
    device = "tank/nixos/nix";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/etc" = {
    device = "tank/nixos/etc";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/var" = {
    device = "tank/nixos/var";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/var/lib" = {
    device = "tank/nixos/var/lib";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/var/lib/minio" = {
    device = "tank/nixos/var/lib/minio";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/var/lib/minio/disk0" = {
    device = "tank/nixos/var/lib/minio/disk0";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/var/lib/minio/disk1" = {
    device = "tank/nixos/var/lib/minio/disk1";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/var/lib/minio/disk2" = {
    device = "tank/nixos/var/lib/minio/disk2";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/var/lib/minio/disk3" = {
    device = "tank/nixos/var/lib/minio/disk3";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/var/log" = {
    device = "tank/nixos/var/log";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/var/spool" = {
    device = "tank/nixos/var/spool";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/home" = {
    device = "tank/userdata/home";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/root" = {
    device = "tank/userdata/home/root";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/home/darkkirb" = {
    device = "tank/userdata/home/darkkirb";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/home/miifox" = {
    device = "tank/userdata/home/miifox";
    fsType = "zfs";
    options = ["zfsutil"];
  };

  fileSystems."/boot" = {
    device = "/dev/disk/by-uuid/8E14-4366";
    fsType = "vfat";
    options = ["X-mount.mkdir"];
  };

  swapDevices = [];

  system.stateVersion = "21.11";

  systemd.network = {
    enable = true;
    networks."ens3".extraConfig = ''
      [Match]
      Name = ens3
      [Network]
      Address = 2a01:4f8:1c17:d953:b4e1:08ff:e658:6f49/64
      Gateway = fe80::1
    '';
  };

  networking.wireguard.interfaces."wg0".ips = ["fd0d:a262:1fa6:e621:b4e1:08ff:e658:6f49/64"];
  home-manager.users.darkkirb = import ./home-manager/darkkirb.nix {
    desktop = false;
    inherit args;
  };
  nix.settings.cores = 2;
  nix.settings.max-jobs = 2;
  nix.daemonCPUSchedPolicy = "idle";
  nix.daemonIOSchedClass = "idle";

  nix.settings.system-features = [
    "kvm"
    "nixos-test"
    "big-parallel"
    "benchmark"
    "gccarch-skylake"
    "ca-derivations"
  ];
  nix.settings.auto-optimise-store = true;

  services.postgresql.settings = {
    max_connections = 200;
    shared_buffers = "1GB";
    effective_cache_size = "3GB";
    maintenance_work_mem = "256MB";
    checkpoint_completion_target = 0.9;
    wal_buffers = "16MB";
    default_statistics_target = 100;
    random_page_cost = 1.1;
    effective_io_concurrency = 200;
    work_mem = "52422kB";
    min_wal_size = "1GB";
    max_wal_size = "4GB";
    max_worker_processes = 2;
    max_parallel_workers_per_gather = 1;
    max_parallel_workers = 2;
    max_parallel_maintenance_workers = 1;
  };

  services.resolved.enable = false;
  services.bind.forwarders = lib.mkForce [];
  services.tailscale.useRoutingFeatures = "server";
  systemd.services.nixos-upgrade.script = lib.mkForce ''
    #!${pkgs.bash}/bin/bash
    set -ex
    builds=$(${pkgs.curl}/bin/curl -H 'accept: application/json' https://hydra.int.chir.rs/jobset/flakes/nixos-config/evals | ${pkgs.jq}/bin/jq -r '.evals[0].builds[]')
    for build in $builds; do
        doc=$(${pkgs.curl}/bin/curl -H 'accept: application/json' https://hydra.int.chir.rs/build/$build)
        jobname=$(echo $doc | ${pkgs.jq}/bin/jq -r '.job')
        if [ "$jobname" = "${config.networking.hostName}.${system}" ]; then
            drvname=$(echo $doc | ${pkgs.jq}/bin/jq -r '.drvpath')
            output=$(${pkgs.nix}/bin/nix-store -r $drvname)
            $output/bin/switch-to-configuration switch
            exit
        fi
    done
  '';
}