change ipv6 address for wake onlan

modules/core/default.nix

@@ -5,6 +5,7 @@
   imports = [
     ./grub.nix
     ./packages.nix
+    ./sops.nix
     ./ssh.nix
     ./system.nix
     ./tty.nix

modules/core/packages.nix

@@ -15,6 +15,7 @@
     pkgs.unzip
     pkgs.sops
     pkgs.ssh-to-age
+    pkgs.age
     pkgs.nixos-anywhere
     pkgs.nixos-generators
     pkgs.efibootmgr
@@ -25,8 +26,7 @@
     pkgs.fzf
     pkgs.bc
     pkgs.wakeonlan
-    pkgs.samba
+    pkgs.openssl
-    pkgs.openldap
   ];
   services = {
     locate = {

modules/core/sops.nix

@@ -0,0 +1,19 @@
+{
+  inputs,
+  ...
+}:
+let
+  secretsPath = builtins.toString inputs.mysecrets;
+in
+{
+  sops = {
+    defaultSopsFile = "${secretsPath}/secrets.yaml";
+    age = {
+      sshKeyPaths = [
+        "/etc/ssh/ssh_host_ed25519_key"
+      ];
+      keyFile = "/var/lib/sops-nix/key.txt";
+      generateKey = true;
+    };
+  };
+}

modules/core/users.nix

@@ -5,6 +5,11 @@
   ...
 }:
 {
+  sops.secrets = {
+    "users_password/beastie" = {
+      neededForUsers = true;
+    };
+  };
   users = {
     users = {
       ${username} = {
@@ -18,7 +23,7 @@
           "video"
         ];
         openssh.authorizedKeys.keys = [
-          config.sops.secrets."ssh_keys/beastie_priv".path
+          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAKMJ3TkEmRQcX7RQijNa2km6a2xXJk6M6FERh7C9nTJ"
         ];
         shell = pkgs.zsh;
       };

modules/optionnals/desktop/packages.nix

@@ -26,6 +26,11 @@
     pkgs.catppuccin-cursors
     pkgs.catppuccin-gtk
     pkgs.postman
+    pkgs.samba
+    pkgs.openldap
+    pkgs.argocd
+    pkgs.talosctl
+    pkgs.talhelper
   ];
   fonts.packages = [
     pkgs.nerd-fonts.dejavu-sans-mono

modules/optionnals/hosts/home-nix.nix

@@ -82,6 +82,7 @@
       #172.18.20.229  auth.grandbesancon.fr
       #172.18.20.181  traefikauth.grandbesancon.fr
       172.18.21.174     test-patchmon.grandbesancon.fr
+      172.18.229.240    test-mycarto-autonome.grandbesancon.fr
     '';
     wireguard = {
       interfaces = {

modules/optionnals/libvirt.nix

@@ -4,6 +4,9 @@
   ...
 }:
 {
+  users.users.${username} = {
+    extraGroups = [ "libvirtd" ];
+  };
   virtualisation = {
     libvirtd = {
       enable = true;
@@ -12,11 +15,13 @@
         #package = pkgs.qemu;
         runAsRoot = true;
         swtpm.enable = true;
+        vhostUserPackages = [
+          pkgs.virtiofsd
+        ];
       };
     };
-
-  };
-  users.users.${username} = {
-    extraGroups = [ "libvirtd" ];
   };
+  environment.systemPackages = with pkgs; [
+    virtiofsd
+  ];
 }

modules/optionnals/sops-desktop.nix

@@ -1,76 +1,61 @@
 {
-  inputs,
   username,
   ...
 }:
-let
-  secretsPath = builtins.toString inputs.mysecrets;
-in
 {
-  sops = {
+  sops.secrets = {
-    defaultSopsFile = "${secretsPath}/secrets.yaml";
+    "users_password/beastie" = {
-    age = {
+      neededForUsers = true;
-      sshKeyPaths = [
-        "/etc/ssh/ssh_host_ed25519_key"
-      ];
-      keyFile = "/var/lib/sops-nix/key.txt";
-      generateKey = true;
     };
-
+    "ssh_keys/default_pub" = {
-    secrets = {
+      owner = "${username}";
-      "users_password/beastie" = {
+      mode = "0644";
-        neededForUsers = true;
+      path = "/home/${username}/.ssh/id_ed25519.pub";
-      };
+    };
-      "ssh_keys/default_pub" = {
+    "ssh_keys/default_priv" = {
-        owner = "${username}";
+      owner = "${username}";
-        mode = "0644";
+      mode = "0600";
-        path = "/home/${username}/.ssh/id_ed25519.pub";
+      path = "/home/${username}/.ssh/id_ed25519";
-      };
+    };
-      "ssh_keys/default_priv" = {
+    "ssh_keys/ansible_pub" = {
-        owner = "${username}";
+      owner = "${username}";
-        mode = "0600";
+      mode = "0644";
-        path = "/home/${username}/.ssh/id_ed25519";
+      path = "/home/${username}/.ssh/id_ed25519_ansible.pub";
-      };
+    };
-      "ssh_keys/ansible_pub" = {
+    "ssh_keys/ansible_priv" = {
-        owner = "${username}";
+      owner = "${username}";
-        mode = "0644";
+      mode = "0600";
-        path = "/home/${username}/.ssh/id_ed25519_ansible.pub";
+      path = "/home/${username}/.ssh/id_ed25519_ansible";
-      };
+    };
-      "ssh_keys/ansible_priv" = {
+    "ssh_keys/beastie_pub" = {
-        owner = "${username}";
+      owner = "${username}";
-        mode = "0600";
+      mode = "0644";
-        path = "/home/${username}/.ssh/id_ed25519_ansible";
+      path = "/home/${username}/.ssh/id_ed25519_beastie.pub";
-      };
+    };
-      "ssh_keys/beastie_pub" = {
+    "ssh_keys/beastie_priv" = {
-        owner = "${username}";
+      owner = "${username}";
-        mode = "0644";
+      mode = "0600";
-        path = "/home/${username}/.ssh/id_ed25519_beastie.pub";
+      path = "/home/${username}/.ssh/id_ed25519_beastie";
-      };
+    };
-      "ssh_keys/beastie_priv" = {
+    "ssh_keys/gitea_semaphore_pub" = {
-        owner = "${username}";
+      owner = "${username}";
-        mode = "0600";
+      mode = "0644";
-        path = "/home/${username}/.ssh/id_ed25519_beastie";
+      path = "/home/${username}/.ssh/id_ed25519_gitea_semaphore.pub";
-      };
+    };
-      "ssh_keys/gitea_semaphore_pub" = {
+    "ssh_keys/gitea_semaphore_priv" = {
-        owner = "${username}";
+      owner = "${username}";
-        mode = "0644";
+      mode = "0600";
-        path = "/home/${username}/.ssh/id_ed25519_gitea_semaphore.pub";
+      path = "/home/${username}/.ssh/id_ed25519_gitea_semaphore";
-      };
+    };
-      "ssh_keys/gitea_semaphore_priv" = {
+    "ssh_keys/wol_pub" = {
-        owner = "${username}";
+      owner = "${username}";
-        mode = "0600";
+      mode = "0644";
-        path = "/home/${username}/.ssh/id_ed25519_gitea_semaphore";
+      path = "/home/${username}/.ssh/id_ed25519_wol";
-      };
+    };
-      "ssh_keys/wol_pub" = {
+    "ssh_keys/wol_priv" = {
-        owner = "${username}";
+      owner = "${username}";
-        mode = "0644";
+      mode = "0600";
-        path = "/home/${username}/.ssh/id_ed25519_wol";
+      path = "/home/${username}/.ssh/id_ed25519_wol.priv";
-      };
-      "ssh_keys/wol_priv" = {
-        owner = "${username}";
-        mode = "0600";
-        path = "/home/${username}/.ssh/id_ed25519_wol.priv";
-      };
     };
   };
 }

modules/optionnals/wakeonlan.nix

@@ -17,7 +17,7 @@
   };
   environment.systemPackages = [ pkgs.ethtool ];
 
-  my.wolipv6address = "2a01:e0a:9cc:99d0:8f3a:6b2c:41d7:e9f5";
+  my.wolipv6address = "2a01:e0a:f5d:3400:6b2c:41d7:e9f5";
 
   boot.initrd = {
     network = {
@@ -32,7 +32,7 @@
       };
       postCommands = ''
         ip -6 addr add ${config.my.wolipv6address}/64 dev ${config.my.laninterface}
-        ip -6 route add default via fe80::224:d4ff:fea5:65bd dev ${config.my.laninterface}
+        ip -6 route add default via fe80::3a07:16ff:fe11:45a8 dev ${config.my.laninterface}
       '';
     };
     availableKernelModules = [ "r8169" ];