depot/ops/nixos/frantech-lux01/default.nix

# SPDX-FileCopyrightText: 2020 Luke Granger-Brown <depot@lukegb.com>
#
# SPDX-License-Identifier: Apache-2.0

{ depot, lib, pkgs, rebuilder, config, ... }:
let
  inherit (depot.ops) secrets;
in {
  imports = [
    ../../../third_party/nixpkgs/nixos/modules/profiles/qemu-guest.nix
    ../lib/low-space.nix
    ../lib/coredns/default.nix
  ];

  boot.initrd.availableKernelModules = [
    "ata_piix"
    "uhci_hcd"
    "virtio_pci"
    "virtio_scsi"
    "sr_mod"
    "virtio_blk"
  ];
  boot.kernelModules = [ "kvm-amd" ];

  # Use GRUB.
  boot.loader.grub.enable = true;
  boot.loader.grub.version = 2;
  boot.loader.grub.device = "/dev/vda";

  powerManagement.cpuFreqGovernor = lib.mkDefault "performance";

  fileSystems = {
    "/" = {
      device = "/dev/vda1";
      fsType = "ext4";
    };
  };

  nix.maxJobs = lib.mkDefault 1;

  # Networking!
  networking = {
    hostName = "frantech-lux01";
    domain = "as205479.net";
    hostId = "92a60220";

    nameservers = [
      "2001:4860:4860::8888"
      "2001:4860:4860::8844"
      "8.8.8.8"
      "8.8.4.4"
    ];
    useDHCP = false;
    defaultGateway = {
      address = "107.189.4.1";
      interface = "ens3";
    };
    defaultGateway6 = {
      address = "2605:6400:30::1";
      interface = "ens3";
    };
    interfaces.ens3 = {
      ipv4.addresses = [{ address = "107.189.4.182"; prefixLength = 24; }];
      ipv6.addresses = [{ address = "2605:6400:30:f1d2::1"; prefixLength = 48; }];
    };
  };
  my.ip.tailscale = "100.125.159.57";
  my.coredns.bind = [ "ens3" "tailscale0" "127.0.0.1" "::1" ];

  system.stateVersion = "21.05";
}