Joey Hafner
fff1d2c480
- system: Module describes core Linux system configuration parameters, and NixOS system parameters. - networking: Basic networking config for metal hosts. - sops: Configures sops-nix to decrypt secrets as appropriate, and provides a useful shell helper. - smb: Reusable module that returns one smb mount. - iscsi: Autoconnect and auto-mount iscsi target. - git: Basic Git config. - docker: Configure Docker. - hardware: Set of modules for physical hardware devices and their related configurations.
27 lines
709 B
Nix
27 lines
709 B
Nix
{ smb, pkgs ? import <nixpkgs>, ... }: {
|
|
|
|
sops.secrets."smb" = {
|
|
sopsFile = ./smb.secrets;
|
|
format = "binary";
|
|
key = "";
|
|
mode = "0440";
|
|
owner = smb.username;
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [ cifs-utils ];
|
|
fileSystems = let
|
|
automount_opts = "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s";
|
|
permissions_opts = "credentials=/run/secrets/smb,uid=1000,gid=1000";
|
|
in { "${smb.name}" = {
|
|
mountPoint = smb.mountPoint;
|
|
device = smb.device;
|
|
fsType = "cifs";
|
|
options = [
|
|
"${automount_opts}"
|
|
"${permissions_opts}"
|
|
"${smb.extra_opts}"
|
|
];
|
|
};
|
|
};
|
|
}
|