nixos-config/config/host-config/nostromo.nix

{ config, lib, pkgs, ... }:

with lib;
let hostname = "nostromo";
in {

  networking = {
    interfaces = {
      eno1.useDHCP = false;
      eno2.useDHCP = false;
      eno3.useDHCP = false;
      eno4.useDHCP = false;
      enp33s0f0.useDHCP = false;
      enp33s0f1.useDHCP = false;
      enp9s0f0.useDHCP = false;
      enp9s0f1.useDHCP = false;

      intif0 = { useDHCP = true; };
    };
  };

  # Hopefully this'll help with NFS...
  boot.kernelModules = [ "rpcsec_gss_krb5" ];

  services.nfs = {
    # See lib/fudo/users.nix for the user@REALM -> user mapping
    server = {
      enable = true;
      createMountPoints = false;
      exports = let
        exportList = [
          "/export/documents 10.0.0.0/24(rw,sync,no_root_squash,no_subtree_check,fsid=10,sec=krb5p)"
          "/export/downloads 10.0.0.0/24(rw,sync,no_root_squash,no_subtree_check,fsid=11,sec=krb5i)"
          "/export/projects  10.0.0.0/24(rw,sync,no_root_squash,no_subtree_check,fsid=11,sec=krb5p)"
        ];
      in ''
        ${concatStringsSep "\n" exportList}
      '';
    };
  };

  systemd.services.nfs-server = {
    # Don't start on boot
    wantedBy = mkForce [ "sea-store.target" ];
    # Only start after filesystem mounts are available
    after = [
      "export-documents.mount"
      "export-downloads.mount"
      "export-projects.mount"
    ];
  };

  fudo.ipfs = {
    enable = true;
    users = [ "niten" ];
    api-address = "/ip4/0.0.0.0/tcp/5001";
  };

  virtualisation = {
    libvirtd = {
      enable = true;
      qemuPackage = pkgs.qemu_kvm;
      onShutdown = "shutdown";
    };
  };
}