sjc

Author: mlyxshi

flake.nix

@@ -50,6 +50,7 @@
           ];
         };
         nrt = import ./host/dmit { inherit self nixpkgs secret; };
+        sjc = import ./host/xtom { inherit self nixpkgs secret; };
         jp3 = import ./host/alice/mkHost.nix {
           inherit self nixpkgs secret;
           hostName = "jp3";

host/init/arm.nix

@@ -102,7 +102,7 @@
               title NixOS Init
               linux /EFI/nixos/${config.system.boot.loader.kernelFile}
               initrd /EFI/nixos/${config.system.boot.loader.initrdFile}
-              options init=${config.system.build.toplevel}/init ${builtins.toString config.boot.kernelParams}
+              options init=${config.system.build.toplevel}/init ${toString config.boot.kernelParams}
             '';
 
             "/EFI/netbootxyz.efi".source = "${pkgs.netbootxyz-efi}"; # emergency rescue on oracle arm

host/xtom/default.nix

@@ -0,0 +1,22 @@
+{
+  self,
+  nixpkgs,
+  secret,
+}:
+nixpkgs.lib.nixosSystem {
+  modules = [
+    secret.nixosModules.default
+    self.nixosModules.nixos.server
+    self.nixosModules.hardware.bios.limine
+    self.nixosModules.network.cloud-init
+    self.nixosModules.services.komari-agent
+    self.nixosModules.services.cloudflare-warp
+    self.nixosModules.services.snell
+    ./misc.nix
+    {
+      nixpkgs.hostPlatform = "x86_64-linux";
+      networking.hostName = "nrt";
+    }
+  ];
+  specialArgs = { inherit self; };
+}

host/xtom/misc.nix

@@ -0,0 +1,30 @@
+{
+  config,
+  pkgs,
+  lib,
+  modulesPath,
+  self,
+  ...
+}:
+{
+
+  services.qemuGuest.enable = true; 
+  services.openssh.ports = [ 23333 ];
+
+  boot.blacklistedKernelModules = [ "virtio_balloon" ];
+
+  networking.nftables.enable = true;
+  networking.nftables.ruleset = ''
+    table inet FIREWALL {
+      chain INPUT {
+        type filter hook input priority 0; policy drop;
+        iifname lo accept
+        ip protocol icmp accept
+        ip6 nexthdr icmpv6 accept
+        ct state {established, related} accept
+        tcp dport { 23333, 8888, 5201 } accept
+        udp dport { 5201 } accept
+      }
+    }
+  '';
+}