inital config

modules/base.nix

@@ -0,0 +1,29 @@
+{ pkgs, ... }:
+
+{
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
+
+  nixpkgs.config.allowUnfree = true;
+
+  networking.networkmanager.enable = true;
+
+  time.timeZone = "Europe/Berlin";
+
+  i18n.defaultLocale = "de_DE.UTF-8";
+
+  console.keyMap = "de";
+
+  environment.systemPackages = with pkgs; [
+    git
+    vim
+    curl
+    wget
+    htop
+    tree
+  ];
+
+  programs.git.enable = true;
+}

modules/boot.nix

@@ -0,0 +1,24 @@
+{ ... }:
+
+{
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  boot.plymouth.enable = true;
+
+  boot.initrd.systemd.enable = true;
+
+  boot.kernelParams = [
+    "quiet"
+    "splash"
+  ];
+
+  boot.consoleLogLevel = 3;
+  boot.initrd.verbose = false;
+
+  boot.initrd.luks.devices."cryptroot" = {
+    device = "/dev/disk/by-partlabel/luks";
+  };
+
+  fileSystems."/".device = "/dev/mapper/cryptroot";
+}

modules/desktop.nix

@@ -0,0 +1,7 @@
+{ ... }:
+
+{
+  hardware.graphics = {
+    enable = true;
+  };
+}

modules/ephemeral-root.nix

@@ -0,0 +1,16 @@
+{ ... }:
+
+{
+  fileSystems."/" = {
+    device = "tmpfs";
+    fsType = "tmpfs";
+
+    options = [
+      "mode=755"
+      "nosuid"
+      "nodev"
+    ];
+
+    neededForBoot = true;
+  };
+}

modules/impermanence.nix

@@ -0,0 +1,4 @@
+{ ... }:
+
+{
+}

modules/persistence.nix

@@ -0,0 +1,25 @@
+{ ... }:
+
+{
+  fileSystems."/persist".neededForBoot = true;
+
+  environment.persistence."/persist" = {
+    hideMounts = true;
+
+    directories = [
+      {
+        directory = "/home/user/nixos-config";
+        user = "user";
+        group = "users";
+      }
+
+      "/var/lib/nixos"
+    ];
+
+    files = [
+      "/etc/machine-id"
+      "/etc/ssh/ssh_host_ed25519_key"
+      "/etc/ssh/ssh_host_ed25519_key.pub"
+    ];
+  };
+}

modules/secrets.nix

@@ -0,0 +1,5 @@
+{ ... }:
+
+{
+  sops.age.keyFile = "/persist/keys/host-age.key";
+}