WIP

configuration.nix

@@ -0,0 +1,36 @@
+{ pkgs, userSettings, systemSettings, ... }:
+{
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+  environment.systemPackages = with pkgs; [
+    # (pkgs.writeShellScriptBin "nrbs" "sudo nixos-rebuild switch")
+    # (pkgs.writeShellScriptBin "nrbsu" "sudo nix-channel --update && sudo nixos-rebuild switch")
+    bash
+    busybox
+    git
+    eza
+  ];
+
+  # For SSH access
+  services.openssh.enable = true;
+
+  # Networking stuff
+  services.avahi = { enable = true; nssmdns4 = true; };
+
+  # Uses rust-based sudo
+  security.sudo-rs = {
+    enable = true;
+    execWheelOnly = false;
+    wheelNeedsPassword = false; # allows sudo without password for those in the wheel group
+  };
+
+  users.users.${userSettings.username} = {
+    isNormalUser  = true;
+    uid = 1000;
+    extraGroups  = [ "wheel" "networkmanager" ];
+    openssh.authorizedKeys.keyFiles = [ /root/.ssh/authorized_keys ];
+  };
+
+  time.timeZone = "${systemSettings.timeZone}";
+  networking.hostName = systemSettings.hostName;
+}

flake.lock

@@ -40,11 +40,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1733392399,
+        "lastModified": 1733581040,
-        "narHash": "sha256-kEsTJTUQfQFIJOcLYFt/RvNxIK653ZkTBIs4DG+cBns=",
+        "narHash": "sha256-Qn3nPMSopRQJgmvHzVqPcE3I03zJyl8cSbgnnltfFDY=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "d0797a04b81caeae77bcff10a9dde78bc17f5661",
+        "rev": "22c3f2cf41a0e70184334a958e6b124fb0ce3e01",
         "type": "github"
       },
       "original": {
@@ -71,18 +71,6 @@
       }
     },
     "nixpkgs_2": {
-      "locked": {
-        "lastModified": 0,
-        "narHash": "sha256-kEsTJTUQfQFIJOcLYFt/RvNxIK653ZkTBIs4DG+cBns=",
-        "path": "/nix/store/nr5nl3zwzl02x3rnikjbry3s5xy7bm1d-source",
-        "type": "path"
-      },
-      "original": {
-        "id": "nixpkgs",
-        "type": "indirect"
-      }
-    },
-    "nixpkgs_3": {
       "locked": {
         "lastModified": 1682134069,
         "narHash": "sha256-TnI/ZXSmRxQDt2sjRYK/8j8iha4B4zP2cnQCZZ3vp7k=",
@@ -120,25 +108,9 @@
       }
     },
     "vscode-server": {
-      "inputs": {
-        "nixpkgs": "nixpkgs_2",
-        "vscode-server": "vscode-server_2"
-      },
-      "locked": {
-        "lastModified": 1,
-        "narHash": "sha256-IWEQNW6HVBCztzSy/1SmMTU6R/dyLlnZrJKk9ldJG/I=",
-        "path": "./nixos/vscode",
-        "type": "path"
-      },
-      "original": {
-        "path": "./nixos/vscode",
-        "type": "path"
-      }
-    },
-    "vscode-server_2": {
       "inputs": {
         "flake-utils": "flake-utils",
-        "nixpkgs": "nixpkgs_3"
+        "nixpkgs": "nixpkgs_2"
       },
       "locked": {
         "lastModified": 1729422940,

flake.nix

@@ -1,5 +1,5 @@
 {
-  description = "Loki flake config";
+  description = "Panoptes flake config";
 
   inputs = {
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
@@ -8,7 +8,7 @@
       url = "github:nix-community/home-manager";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    vscode-server.url = "path:./nixos/vscode";
+    vscode-server.url = "github:nix-community/nixos-vscode-server";
   };
 
   outputs = {
@@ -19,61 +19,63 @@
     ...
   } @ inputs:
   let
+    stateVersion = "24.11";
     inherit (self) outputs;
-    system = "x86_64-linux";
+    nixosSystem = inputs.nixpkgs.lib.nixosSystem;
-    pkgs = nixpkgs.legacyPackages.${system};
+    
-    stateVersion = "24.05";
+    userSettings = rec {
-    timeZone = "America/Chicago";
+      username = "panoptes";
-    hostname = "loki";
+      gitUserName = "John Lancaster";
-    lokiPort = 3100;
+      gitUserEmail = "32917998+jsl12@users.noreply.github.com";
-    lokiUser = "loki";
+      # gitUserEmail = "asdfasdf@asdf.com";
-    lokiPath = "/srv/loki";
+    };
+
+    systemSettings = rec {
+      hostName = "panoptes-nix";
+      system = "x86_64-linux";
+      timeZone = "America/Chicago";
+      locale = "en_US.UTF-8";
+    };
+
+    pkgs = inputs.nixpkgs.legacyPackages.${systemSettings.system};
+    pkgs-stable = inputs.nixpkgs-stable.legacyPackages.${systemSettings.system};
+
   in
   {
     nixosConfigurations = {
-      ${hostname} = nixpkgs.lib.nixosSystem {
+      "${systemSettings.hostName}" = nixosSystem {
-        specialArgs = {inherit inputs outputs;};
+        system = systemSettings.system;
+        specialArgs = {
+          inherit inputs;
+          inherit outputs;
+          inherit userSettings;
+          inherit systemSettings;
+        };
         modules = [
-          ./nixos/configuration.nix # > Our main nixos configuration file <
+          ./configuration.nix # > Our main nixos configuration file <
-          "${nixpkgs}/nixos/modules/virtualisation/proxmox-lxc.nix"
+          "${inputs.nixpkgs}/nixos/modules/virtualisation/proxmox-lxc.nix"
           ({ ... }: {
-            nixpkgs.hostPlatform = "${system}";
             system.stateVersion = "${stateVersion}";
-            time.timeZone = "${timeZone}";
+            services.vscode-server.enable = true;
-            environment.systemPackages = [
-              (pkgs.writeShellScriptBin "nfs" ''
-                sudo nixos-rebuild switch --flake git+file://${lokiPath}#${hostname}
-              '')
-            ];
-          })
-          (import ./nixos/loki.nix {
-            inherit pkgs;
-            inherit lokiPort;
-            inherit lokiUser;
-            inherit lokiPath;
           })
+          inputs.vscode-server.nixosModules.default
         ];
       };
     };
 
-    # Standalone home-manager configuration entrypoint
-    # Available through 'home-manager --flake .#your-username@your-hostname'
     homeConfigurations = {
       useGlobalPkgs = true;
-      "root@${hostname}" = home-manager.lib.homeManagerConfiguration {
+      "panoptes@panoptes-nix" = home-manager.lib.homeManagerConfiguration {
-        pkgs = nixpkgs.legacyPackages.${system};
+        inherit pkgs stateVersion;
-        extraSpecialArgs = {inherit inputs outputs;};
+        specialArgs = {
-        modules = [(import ./home-manager/git.nix { repoPath = "${lokiPath}"; })];
+          inherit inputs;
-      };
+          inherit outputs;
-
+          inherit userSettings;
-      # FIXME replace with your username@hostname
+          inherit systemSettings;
-      "${lokiUser}@${hostname}" = home-manager.lib.homeManagerConfiguration {
+        };
-        pkgs = nixpkgs.legacyPackages.${system};
-        extraSpecialArgs = {inherit inputs outputs;};
-        # > Our main home-manager configuration file <
         modules = [
-          (import ./home-manager/home.nix { user = "${lokiUser}"; repoPath = "${lokiPath}"; })
+          ./home.nix
-          (import ./home-manager/git.nix { repoPath = "${lokiPath}"; })
+          # ({...}: {home.stateVersion = "${stateVersion}";})
         ];
       };
     };

home-manager/git.nix

@@ -1,10 +0,0 @@
-{ repoPath, ... }:
-{
-  programs.git = {
-    enable = true;
-    extraConfig.safe.directory = "${repoPath}";
-    extraConfig.credential.helper = "store --file ~/.git-credentials";
-    userName = "John Lancaster";
-    userEmail = "32917998+jsl12@users.noreply.github.com";
-  };
-}

home-manager/home.nix

@@ -1,9 +0,0 @@
-{ user, repoPath, ... }:
-{
-  programs.home-manager.enable = true;
-  home = {
-    stateVersion = "24.05";
-    username = "${user}";
-    homeDirectory = "${repoPath}";
-  };
-}

home.nix

@@ -0,0 +1,41 @@
+{
+  pkgs,
+  systemSettings,
+  userSettings,
+  ...
+}:
+let
+  homePath = "/srv/panoptes";
+  repoURL = "https://gitea.john-stream.com/john/loki-nix";
+  repoBranch = "reorg";
+in
+{
+  nixpkgs.config.allowUnfree = true;
+  programs.home-manager.enable = true;
+
+  programs.git = {
+    enable = true;
+    extraConfig.credential.helper = "store --file ~/.git-credentials";
+    userName = "${userSettings.gitUserName}";
+    userEmail = "${userSettings.gitUserEmail}";
+    extraConfig.safe.directory = "${homePath}";
+  };
+
+  programs.bash.enable = true;
+  programs.ssh.enable = true;
+
+  home = {
+    homeDirectory = "${homePath}";
+    packages = [
+      (pkgs.writeShellScriptBin "nfs" ''
+        sudo nixos-rebuild switch --flake ${homePath}#${hostName} --impure
+      '')
+      (pkgs.writeShellScriptBin "init-panoptes" ''
+        sudo -u git clone -b ${repoBranch} ${repoURL} /srv/panoptes
+      '')
+      git
+    ];
+  };
+
+  systemd.user.startServices = "sd-switch";
+}

nixos/configuration.nix

@@ -1,26 +0,0 @@
-{ pkgs, ... }:
-{
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
-
-  environment.systemPackages = with pkgs; [
-    (pkgs.writeShellScriptBin "nrbs" "sudo nixos-rebuild switch")
-    (pkgs.writeShellScriptBin "nrbsu" "sudo nix-channel --update && sudo nixos-rebuild switch")
-    bash
-    busybox
-    git
-    eza
-  ];
-
-  # For SSH access
-  services.openssh.enable = true;
-
-  # Networking stuff
-  services.avahi = { enable = true; nssmdns4 = true; };
-
-  # Uses rust-based sudo
-  security.sudo-rs = {
-    enable = true;
-    execWheelOnly = false;
-    wheelNeedsPassword = false; # allows sudo without password for those in the wheel group
-  };
-}

nixos/vscode/flake.nix

@@ -1,14 +0,0 @@
-{
-  inputs.vscode-server.url = "github:nix-community/nixos-vscode-server";
-
-  outputs = { self, nixpkgs, vscode-server }: {
-    nixosConfigurations.yourhostname = nixpkgs.lib.nixosSystem {
-      modules = [
-        vscode-server.nixosModules.default
-        ({ config, pkgs, ... }: {
-          services.vscode-server.enable = true;
-        })
-      ];
-    };
-  };
-}

nixosModules/default.nix

@@ -0,0 +1,19 @@
+{
+  pkgs,
+  config,
+  lib,
+  inputs,
+  outputs,
+  ...
+}: {
+  imports =
+    [
+      ./services/loki.nix
+    ];
+
+  config = {
+    nix.settings.experimental-features = ["nix-command" "flakes"];
+    programs.nix-ld.enable = true;
+    nixpkgs.config.allowUnfree = true;
+  };
+}

nixosModules/services/loki.nix

@@ -1,9 +1,13 @@
-{ pkgs, lokiPort ? 3100, ... }:
+{ pkgs, config, ... }:
 {
-  networking.firewall.allowedTCPPorts = [ lokiPort ];
+  networking.firewall.allowedTCPPorts = [
+    config.services.loki.configuration.server.http_listen_port
+  ];
 
   environment.systemPackages = with pkgs; [
-    (pkgs.writeShellScriptBin "loki-check" "curl http://localhost:${builtins.toString lokiPort}/ready")
+    (pkgs.writeShellScriptBin "loki-check" ''
+      curl http://localhost:${config.services.loki.configuration.server.http_listen_port}/ready
+    '')
     (pkgs.writeShellScriptBin "loki-logs" "journalctl -b -u loki.service -n 10")
   ];
   
@@ -12,7 +16,7 @@
     user = "loki";
 
     configuration = {
-      server.http_listen_port = lokiPort;
+      server.http_listen_port = 3100;
       # server.grpc_listen_port = 9096;
       auth_enabled = false;