Initial commit

nixos-config/default.nix

@@ -0,0 +1,16 @@
+{ modulesPath, ... }:
+
+{
+    imports = [
+        (modulesPath + "/profiles/qemu-guest.nix")
+
+        ./hardware
+        ./services
+
+        ./nix.nix
+        ./state-version.nix
+        ./system-packages.nix
+        ./timezone.nix
+    ];
+}
+

nixos-config/hardware/boot.nix

@@ -0,0 +1,39 @@
+{ lib, ... }:
+
+{
+    boot = {
+        # Enable LISH and Linode Booting w/ GRUB
+        loader = {
+            # Increase Timeout to Allow LISH Connection
+            # NOTE: The image generator tries to set a timeout of 0, so we must force
+            timeout = lib.mkDefault 10;
+
+            grub = {
+                enable = true;
+                forceInstall = true;
+                device = "nodev";
+                fsIdentifier = "label";
+
+                # Allow serial connection for GRUB to be able to use LISH
+                extraConfig = ''
+                  serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
+                  terminal_input serial;
+                  terminal_output serial
+                '';
+            };
+        };
+
+        # Add Required Kernel Modules
+        # NOTE: These are not documented in the install guide
+        initrd.availableKernelModules = [
+            "virtio_pci"
+            "virtio_scsi"
+            "ahci"
+            "sd_mod"
+        ];
+
+        # Set Up LISH Serial Connection
+        kernelParams = [ "console=ttyS0,19200n8" ];
+        kernelModules = [ "virtio_net" ];
+    };
+}

nixos-config/hardware/cpu.nix

@@ -0,0 +1,3 @@
+{
+    hardware.cpu.amd.updateMicrocode = true;
+}

nixos-config/hardware/default.nix

@@ -0,0 +1,10 @@
+{
+    imports = [
+        ./boot.nix
+        ./cpu.nix
+        ./file-systems.nix
+        ./networking.nix
+        ./swap-devices.nix
+    ];
+}
+

nixos-config/hardware/file-systems.nix

@@ -0,0 +1,9 @@
+{
+    fileSystems = {
+        "/" = {
+            device = "/dev/sda";
+            fsType = "ext4";
+            autoResize = true;
+        };
+    };
+}

nixos-config/hardware/networking.nix

@@ -0,0 +1,26 @@
+{ lib
+, domain ? "linode-domain"
+, hostname ? "linode-hostname"
+, ... }:
+
+{
+    networking = {
+        useDHCP = lib.mkForce false;
+        usePredictableInterfaceNames = false;
+
+        interfaces.eth0 = {
+            useDHCP = true;
+            
+            # Linode expects IPv6 privacy extensions to be disabled, so disable them
+            # See: https://www.linode.com/docs/guides/manual-network-configuration/#static-vs-dynamic-addressing
+            tempAddress = "disabled";
+        };
+
+        domain = domain;
+        hostName = hostname;
+
+        firewall = {
+            enable = true;
+        };
+    };
+}

nixos-config/hardware/swap-devices.nix

@@ -0,0 +1,3 @@
+{
+    swapDevices = [ { device = "/dev/sdb"; } ];
+}

nixos-config/nix.nix

@@ -0,0 +1,15 @@
+{
+    nix = {
+        optimise = {
+            automatic = true;
+            dates = [ "weekly" ];
+        };
+
+
+        gc = {
+            automatic = true;
+            options = "--delete-older-than 7d";
+            dates = "weekly";
+        };
+    };
+}

nixos-config/services/default.nix

@@ -0,0 +1,5 @@
+{
+  imports = [
+    ./openssh.nix
+  ];
+}

nixos-config/services/openssh.nix

@@ -0,0 +1,12 @@
+{
+    services.openssh = {
+        enable = true;
+        openFirewall = true;
+
+        settings = {
+            PermitRootLogin = "prohibit-password";
+            KbdInteractiveAuthentication = false;
+            PasswordAuthentication = false;
+        };
+    };
+}

nixos-config/state-version.nix

@@ -0,0 +1,3 @@
+{
+    system.stateVersion = "24.11";
+}

nixos-config/system-packages.nix

@@ -0,0 +1,30 @@
+{ pkgs, ... }:
+
+{
+    environment.systemPackages = with pkgs;
+        [
+            # Install diagnostic tools for Linode support
+            inetutils
+            mtr
+            sysstat
+
+            # Base image packages
+            busybox
+            gnumake
+            neovim
+            wget
+        ];
+
+
+    programs.zsh =
+        {
+            enable = true;
+
+            vteIntegration = true;
+
+            autosuggestions.enable = true;
+            enableCompletion = true;
+            ohMyZsh.enable = true;
+            syntaxHighlighting.enable = true;
+        };
+}

nixos-config/timezone.nix

@@ -0,0 +1,3 @@
+{
+    time.timeZone = "America/New_York";
+}