.gitignore

@@ -2,4 +2,4 @@
 # Ignore build outputs from performing a nix-build or `nix build` command
 result
 result-*
-.pre-commit-config.yaml
+

README.md

@@ -146,7 +146,8 @@ machine. The only technically required file in there is `configuration.nix`. So
 
 A good skeleton is probably:
 ```
-{config, pkgs, lib, flake-inputs, ... }: {
+flake-inputs:
+{config, pkgs, lib, ... }: {
 
 imports = [
   ./hardware-configuration.nix
@@ -169,10 +170,6 @@ In your hardware
 configuration you should basically only write you filesystem layout and your hostPlatform. The bootloading stuff
 is already taken care of by `../../roles`.
 
-The `flake-inputs` argument is optional, but you can use it if you need to get a hold of the flake inputs,
-else this is a complete normal nixos system configuration module (with a lot of settings already imorted
-from `../../roles`).
-
 As of moment of writing `network.nix` should contain ip, nameserver and default gateway setup. As parts of
 this is constant across all systems and will undergo refactor soon.
 
@@ -281,31 +278,3 @@ something like this:
 {lib, pkgs, config, ...} :
 <module code >
 ```
-
-# Contributing
-
-Like with all FS projects, you are welcome to contribute. Work is done usually by the person that is most annoyed
-by the circumstances or by the person that didn't run fast enough. So we are happy if we get help. That doesn't
-mean that we don't need to have some level of quality, people after us needs to work with it. It is live infrastructure
-and downtime hurts someone (and in the wrong moment even really bad (Matheball ticket sales for example)).
-
-So here are some Guidelines.
-
-## Coding style and linting.
-If you run `nix flake check` there are automated checks in place, please make sure to pass them.
-There is also a code autoformatter (`alejandra`) incorporated into those. If you want to run
-it you can do so over the development shell or by running `nix fmt`.
-You can also install
-them into your local git repository as pre-commit hooks, and setting up a shell that has
-even more tooling by running `nix develop`. That will give you a bash in which you can run
-all the checks manually `pre-commit run -a`. This will also run the autoformatter.
-
-## Process for submitting changes
-
-1. If it is something bigger, please open an issue first describing what and why you want to do something.
-   If it is just something small, skip this step.
-2. Fork the repo and implement your changes in a branch on your fork. Afterwards open a pull request (possibly mentioning the issue).
-   Against the main branch.
-   - Your branch should be based on an up to date version of main, if it is not consider rebasing.
-3. You will need to find someone with the proper rights to approve of your changes, but most of the time there will be request
-   for changes first.

flake-module.nix

@@ -1,60 +1,28 @@
-{inputs, ...}: {
+{inputs, ...}:
+{
   # debug = true;
   # We only define machines config in this flake yet, so we only include
   # the module that builds these. This file might get fuller, if we need to
   # build our own packages, that are not flakes.
-  imports = [
+  imports = [ ./nixos/flake-module.nix
-    ./nixos/flake-module.nix
-    inputs.pre-commit-hooks.flakeModule
         # To import a flake module
         # 1. Add foo to inputs
         # 2. Add foo as a parameter to the outputs function
         # 3. Add here: foo.flakeModule
+
   ];
-  systems = ["x86_64-linux"];
+  systems = [ "x86_64-linux"];
-  perSystem = {
+#  perSystem = { config, self', inputs', pkgs, system, ... }: {
-    config,
-    pkgs,
-    ...
-  }: {
-    devShells.default = config.pre-commit.devShell;
-
-    pre-commit = let
-      generatedFiles = [
-        "hardware-configuration\\.nix"
-      ];
-    in {
-      check.enable = true;
-      settings = {
-        # for some reason statix takes it config differently than all the other hooks.
-        settings.statix = {
-          format = "stderr";
-          ignore = generatedFiles;
-        };
-        hooks = {
-          nil.enable = true;
-          statix.enable = true;
-          deadnix = {
-            enable = true;
-            excludes = generatedFiles;
-          };
-          alejandra.enable = true;
-        };
-      };
-    };
-
-    formatter = pkgs.alejandra;
-
   # Per-system attributes can be defined here. The self' and inputs'
   # module parameters provide easy access to attributes of the same
   # system.
-  };
 
   # Equivalent to  inputs'.nixpkgs.legacyPackages.hello;
-  #      flake = {
+#  };
+#      flake = {
         # The usual flake attributes can be defined here, including system-
         # agnostic ones like nixosModule and system-enumerating ones, although
         # those are more easily expressed in perSystem.
 
-  #      };
+#      };
 }

flake.lock

@@ -33,24 +33,6 @@
         "type": "indirect"
       }
     },
-    "flake-utils": {
-      "inputs": {
-        "systems": "systems"
-      },
-      "locked": {
-        "lastModified": 1685518550,
-        "narHash": "sha256-o2d0KcvaXzTrPRIo0kOLV0/QXHhDQ5DTi+OxcjO8xqY=",
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "rev": "a1720a10a6cfe8234c0e93907ffe81be440f4cef",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "type": "github"
-      }
-    },
     "impermanence": {
       "locked": {
         "lastModified": 1697303681,
@@ -169,35 +151,12 @@
         "type": "github"
       }
     },
-    "pre-commit-hooks": {
-      "inputs": {
-        "flake-compat": [],
-        "flake-utils": "flake-utils",
-        "gitignore": [],
-        "nixpkgs": [],
-        "nixpkgs-stable": []
-      },
-      "locked": {
-        "lastModified": 1699271226,
-        "narHash": "sha256-8Jt1KW3xTjolD6c6OjJm9USx/jmL+VVmbooADCkdDfU=",
-        "owner": "cachix",
-        "repo": "pre-commit-hooks.nix",
-        "rev": "ea758da1a6dcde6dc36db348ed690d09b9864128",
-        "type": "github"
-      },
-      "original": {
-        "owner": "cachix",
-        "repo": "pre-commit-hooks.nix",
-        "type": "github"
-      }
-    },
     "root": {
       "inputs": {
         "flake-parts": "flake-parts",
         "impermanence": "impermanence",
         "nixos-mailserver": "nixos-mailserver",
         "nixpkgs": "nixpkgs",
-        "pre-commit-hooks": "pre-commit-hooks",
         "sops-nix": "sops-nix"
       }
     },
@@ -222,21 +181,6 @@
         "type": "github"
       }
     },
-    "systems": {
-      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
-        "owner": "nix-systems",
-        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default",
-        "type": "github"
-      }
-    },
     "utils": {
       "locked": {
         "lastModified": 1605370193,

flake.nix

@@ -17,17 +17,8 @@
     impermanence = {
       url = "github:nix-community/impermanence";
     };
-    pre-commit-hooks = {
-      url = "github:cachix/pre-commit-hooks.nix";
-      inputs = {
-        flake-compat.follows = "";
-        gitignore.follows = "";
-        nixpkgs-stable.follows = "";
-        nixpkgs.follows = "";
-      };
-    };
   };
 
-  outputs = inputs @ {flake-parts, ...}:
+  outputs = inputs@{ flake-parts, ... }:
-    flake-parts.lib.mkFlake {inherit inputs;} (import ./flake-module.nix);
+    flake-parts.lib.mkFlake { inherit inputs; } (import ./flake-module.nix);
 }

nixos/flake-module.nix

@@ -1,30 +1,20 @@
 # copied and adopted from maralorns config
+
 # This automatically searches for nixos configs in ./machines/${name}/configuration.nix
 # and exposes them as outputs.nixosConfigurations.${name}
-{
+{ withSystem, lib, inputs, ... }: {
-  withSystem,
-  lib,
-  inputs,
-  ...
-}: {
   flake = {
-    nixosConfigurations = withSystem "x86_64-linux" ({pkgs, ...}: let
+    nixosConfigurations = withSystem "x86_64-linux" ({ pkgs, ... }:
+    let
       machines = builtins.attrNames (builtins.readDir ./machines);
-      makeSystem = name: let
+      makeSystem = name:
-        importedConfig = import (./. + "/machines/${name}/configuration.nix");
-        systemConfig =
-          if lib.isFunction importedConfig
-          then x: importedConfig (x // {flake-inputs = inputs;})
-          else importedConfig;
-      in
         pkgs.nixos {
           imports = [
-            systemConfig
+            (import (./. + "/machines/${name}/configuration.nix") inputs)
             inputs.sops-nix.nixosModules.sops
             inputs.impermanence.nixosModules.impermanence
           ];
         };
-    in
+    in lib.genAttrs machines makeSystem);
-      lib.genAttrs machines makeSystem);
   };
 }

nixos/machines/ghatanothoa/configuration.nix

@@ -1,17 +1,19 @@
-{
+flake-inputs:
-  imports = [
+{config, pkgs, lib, ... }: {
+
+imports = [
   ./hardware-configuration.nix
   ../../modules/jitsi.nix
   ../../roles
   ./network.nix
-  ];
+];
 
   services.mathebau-jitsi = {
     enable = true;
     hostName = "meet.mathebau.de";
   };
 
-  # System configuration here
+# System configuration here
   networking.hostName = "ghatanothoa";
   system.stateVersion = "23.11";
 }

nixos/machines/ghatanothoa/hardware-configuration.nix

@@ -1,15 +1,15 @@
-{lib, ...}: {
+{config, lib, pkgs, modulesPath, ...}: {
-  imports = [];
+  imports = [ ];
 
   fileSystems."/" = {
     device = "gha-root";
     fsType = "tmpfs";
-    options = ["size=1G" "mode=755"];
+    options = [ "size=1G" "mode=755" ];
   };
   fileSystems."/persist" = {
     device = "/dev/disk/by-uuid/e0a160ef-7d46-4705-9152-a6b602898136";
     fsType = "btrfs";
-    options = ["subvol=persist"];
+    options = [ "subvol=persist" ];
     neededForBoot = true;
   };
   fileSystems."/boot" = {
@@ -19,10 +19,11 @@
   fileSystems."/nix" = {
     device = "/dev/disk/by-uuid/e0a160ef-7d46-4705-9152-a6b602898136";
     fsType = "btrfs";
-    options = ["subvol=nix"];
+    options = [ "subvol=nix" ];
   };
 
-  swapDevices = [{device = "/dev/disk/by-uuid/e6e3ba6b-c9f5-4960-b56d-f49760d76a4a";}];
+  swapDevices =
+    [{ device = "/dev/disk/by-uuid/e6e3ba6b-c9f5-4960-b56d-f49760d76a4a"; }];
 
   nix.settings.max-jobs = lib.mkDefault 4;
 

nixos/machines/ghatanothoa/network.nix

@@ -2,15 +2,14 @@
 # everyone gets the same nameserver and the same prefixLength and address vs defaultGateway alsways
 # depend on the same thing 
 {
-  imports = [];
+  imports = [ ];
   networking = {
-    interfaces.enX0.ipv4.addresses = [
+    interfaces.enX0.ipv4.addresses = [ {
-      {
       address = "192.168.0.25";
       prefixLength = 16;
-      }
+    } ];
-    ];
     defaultGateway = "192.168.0.152";
     nameservers = ["130.83.2.22" "130.83.56.60" "130.83.22.60" "130.82.22.63"];
   };
 }
+

nixos/modules/impermanence.nix

@@ -1,20 +1,19 @@
-{
+{lib, config, ...} :
-  lib,
+
-  config,
+let 
-  ...
+  inherit (lib)
-}: let
-  inherit
-    (lib)
     mkEnableOption
     mkIf
     mkOption
     types
     ;
   cfg = config.impermanence;
-in {
+in
-  imports = [];
 
-  options.impermanence = {
+{
+imports = [ ];
+
+options.impermanence = {
   enable = mkEnableOption "impermanence";
   storagePath = mkOption {
     type = types.path;
@@ -26,9 +25,9 @@ in {
     default = "persist";
     description = "the name of the persistent data store";
   };
-  };
+};
 
-  config = mkIf cfg.enable {
+config = mkIf cfg.enable {
   environment.persistence.${cfg.name} = {
     persistentStoragePath = cfg.storagePath;
     directories = [
@@ -43,5 +42,6 @@ in {
     ];
   };
   environment.etc.machine-id.source = "${cfg.storagePath}/machine-id";
-  };
+};
+
 }

nixos/modules/jitsi.nix

@@ -1,19 +1,14 @@
-{
+{pkgs, config, lib, modulesPath, ...}:
-  config,
+let 
-  lib,
+  inherit (lib)
-  modulesPath,
-  ...
-}: let
-  inherit
-    (lib)
     mkIf
     mkEnableOption
     mkOption
-    head
+    head;
-    ;
   inherit (lib.types) str;
   cfg = config.services.mathebau-jitsi;
-in {
+in
+{
   imports = [(modulesPath + "/services/web-apps/jitsi-meet.nix")];
   
   options.services.mathebau-jitsi = {
@@ -28,25 +23,18 @@ in {
   };
 
   config = mkIf cfg.enable {
-    services = {
+    services.jitsi-meet = {
-      jitsi-meet = {
       enable = true;
+      hostName = cfg.hostName;
       config = {
         defaultLang = "de";
       };
-        inherit (cfg) hostName;
     };
-      jitsi-videobridge = {
+    services.jitsi-videobridge = {
       openFirewall = true;
       nat = {
         publicAddress = "130.83.2.184";
-          inherit (cfg) localAddress;
+        localAddress = cfg.localAddress;
-        };
-      };
-      #We are behind a reverse proxy that handles TLS
-      nginx.virtualHosts."${cfg.hostName}" = {
-        enableACME = false;
-        forceSSL = false;
       };
     };
     environment.persistence.${config.impermanence.name} = {
@@ -55,7 +43,13 @@ in {
         "/var/lib/prosody"
       ];
     };
+  #We are behind a reverse proxy that handles TLS
+    services.nginx.virtualHosts."${cfg.hostName}" = {
+      enableACME = false;
+      forceSSL = false;
+    };
+
   #The network ports for HTTP(S) are not opened automatically
-    networking.firewall.allowedTCPPorts = [80 443];
+    networking.firewall.allowedTCPPorts = [ 80 443 ];
   };
 }

nixos/roles/admins.nix

@@ -1,34 +1,37 @@
-{lib, ...}:
+{lib, ...} :
-with lib; let
+with lib;
+
+let
   admins = {
     nerf = {
-      hashedPassword = "$y$j9T$SJcjUIcs3JYuM5oyxfEQa/$tUBQT07FK4cb9xm.A6ZKVnFIPNOYMOKC6Dt6hadCuJ7";
+      hashedPassword =
+        "$y$j9T$SJcjUIcs3JYuM5oyxfEQa/$tUBQT07FK4cb9xm.A6ZKVnFIPNOYMOKC6Dt6hadCuJ7";
         keys = [
           "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEdA4LpEGUUmN8esFyrNZXFb2GiBID9/S6zzhcnofQuP nerf@nerflap2"
         ];
     };
     gonne = {
-      hashedPassword = "$6$EtGpHEcFkOi0yUWp$slXf0CvIUrhdqaoCrQ5YwtYu2IVuE1RGGst4fnDPRLWVm.lYx0ruvSAF2/vw/sLbW37ORJjlb0NHQ.kSG7cVY/";
+      hashedPassword =
+        "$6$EtGpHEcFkOi0yUWp$slXf0CvIUrhdqaoCrQ5YwtYu2IVuE1RGGst4fnDPRLWVm.lYx0ruvSAF2/vw/sLbW37ORJjlb0NHQ.kSG7cVY/";
         keys = [
           "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFopCUadohY3wg9AoEup9TDRDMyEPSLsQoCnN4lsKCrr gonne@mathebau.de NixOS"
         ];
     };
   };
 
-  mkAdmin = name: {
+  mkAdmin = name :
-    hashedPassword,
+  {hashedPassword, keys}: {
-    keys,
-  }: {
     "${name}" = {
       isNormalUser = true;
       createHome = true;
-      extraGroups = ["wheel"];
+      extraGroups = [ "wheel" ];
       group = "users";
       home = "/home/${name}";
-      openssh.authorizedKeys = {inherit keys;};
+      openssh.authorizedKeys = { inherit keys; };
       inherit hashedPassword;
     };
   };
+
 in {
   users.users = mkMerge (mapAttrsToList mkAdmin admins);
 }

nixos/roles/default.nix

@@ -1,56 +1,46 @@
-{
+{pkgs, config, lib, modulesPath, ...} : {
-  pkgs,
+
-  lib,
+imports = [
-  modulesPath,
-  ...
-}: {
-  imports = [
   ./admins.nix
   ./nix_keys.nix
   ./prometheusNodeExporter.nix
   (modulesPath + "/virtualisation/xen-domU.nix")
   ../modules/impermanence.nix
   ];
-  nix = {
+nix = {
   extraOptions = ''
     experimental-features = nix-command flakes
     builders-use-substitutes = true
   '';
-  };
+};
 
-  networking = {
+networking = {
-    firewall = {
+  firewall = { # these shoud be default, but better make sure!
-      # these shoud be default, but better make sure!
     enable = true;
     allowPing = true;
   };
   nftables.enable = true;
   useDHCP = false; # We don't speak DHCP and even if we would, we should enable it per interface
   # hosts = # TODO write something to autogenerate ip adresses!
-  };
+};
 
-  users = {
+users = {
   mutableUsers = false;
   users.root.hashedPassword = "!";
-  };
+};
 
-  impermanence.enable = true;
+impermanence.enable = true;
 
-  sops.age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
+sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
 
-  environment = {
+environment = {
   systemPackages = builtins.attrValues {
-      inherit
+    inherit (pkgs)
-        (pkgs)
+      htop lsof tmux btop;
-        htop
-        lsof
-        tmux
-        btop
-        ;
-    };
   };
+};
 
-  services = {
+services = {
   journald.extraConfig = "SystemMaxUse=5G";
 
   nginx = {
@@ -66,7 +56,7 @@
       PasswordAuthentication = false;
     };
   };
-    #Prevent clock drift due to interaction problem with xen hardware clock
+#Prevent clock drift due to interaction problem with xen hardware clock 
   timesyncd.enable = lib.mkForce true;
-  };
+};
 }

nixos/roles/nix_keys.nix

@@ -1,5 +1,5 @@
 {
-  imports = [];
+  imports = [ ];
   nix.settings.trusted-public-keys = [
     "nerflap2-1:pDZCg0oo9PxNQxwVSQSvycw7WXTl53PGvVeZWvxuqJc="
     "gonne.mathebau.de-1:FsXFyFiBFE/JxC9MCkt/WuiXjx5dkRI9RXj0FxOQrV0="

nixos/roles/prometheusNodeExporter.nix

@@ -1,5 +1,6 @@
-{config, ...}: {
+{config, ...}:
-  imports = [];
+{
+  imports = [ ];
   services.prometheus.exporters.node = {
     enable = true;
     port = 9100;
@@ -34,6 +35,6 @@
       "processes"
     ];
   };
-  networking.firewall.allowedTCPPorts = [9100];
+  networking.firewall.allowedTCPPorts = [ 9100 ];
-  environment.persistence.${config.impermanence.name}.directories = ["/var/lib/${config.services.prometheus.stateDir}"];
+  environment.persistence.${config.impermanence.name}.directories = [ "/var/lib/${config.services.prometheus.stateDir}" ];
 }