177 lines
4.7 KiB
Nix
177 lines
4.7 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
let local-domain = "sea.fudo.org";
|
|
in {
|
|
fileSystems = {
|
|
# "/mnt/documents" = {
|
|
# device = "whitedwarf.${local-domain}:/volume1/Documents";
|
|
# fsType = "nfs4";
|
|
# options = [ "comment=systemd.automount" ];
|
|
# };
|
|
# "/mnt/downloads" = {
|
|
# device = "whitedwarf.${local-domain}:/volume1/Downloads";
|
|
# fsType = "nfs4";
|
|
# options = [ "comment=systemd.automount" ];
|
|
# };
|
|
"/mnt/music" = {
|
|
device = "doraemon.${local-domain}:/volume1/Music";
|
|
fsType = "nfs";
|
|
options = [ "comment=systemd.automount" ];
|
|
};
|
|
"/mnt/video" = {
|
|
device = "doraemon.${local-domain}:/volume1/Video";
|
|
fsType = "nfs";
|
|
options = [ "comment=systemd.automount" ];
|
|
};
|
|
# fileSystems."/mnt/security" = {
|
|
# device = "panopticon.${local-domain}:/srv/kerberos/data";
|
|
# fsType = "nfs4";
|
|
# };
|
|
"/mnt/cargo_video" = {
|
|
device = "cargo.${local-domain}:/volume1/video";
|
|
fsType = "nfs";
|
|
options = [ "comment=systemd.automount" "nfsvers=4.2" ];
|
|
};
|
|
"/mnt/photo" = {
|
|
device = "cargo.${local-domain}:/volume1/pictures";
|
|
fsType = "nfs";
|
|
options = [ "comment=systemd.automount" "nfsvers=4.2" ];
|
|
};
|
|
|
|
# "proto=tcp"
|
|
|
|
# # NOTE: these are pointing directly to nostromo so the krb lookup works
|
|
"/net/documents" = {
|
|
device = "nostromo.sea.fudo.org:/export/documents";
|
|
fsType = "nfs4";
|
|
options = [
|
|
"sec=krb5p"
|
|
"x-systemd.automount"
|
|
# "vers=4"
|
|
# "minorversion=2"
|
|
# "proto=tcp"
|
|
];
|
|
};
|
|
"/net/downloads" = {
|
|
device = "nostromo.sea.fudo.org:/export/downloads";
|
|
fsType = "nfs4";
|
|
options = [
|
|
"sec=krb5i"
|
|
"x-systemd.automount"
|
|
# "vers=4"
|
|
# "minorversion=2"
|
|
# "proto=tcp"
|
|
];
|
|
};
|
|
"/net/projects" = {
|
|
device = "nostromo.sea.fudo.org:/export/projects";
|
|
fsType = "nfs4";
|
|
options = [
|
|
"sec=krb5p"
|
|
"x-systemd.automount"
|
|
# "vers=4"
|
|
# "minorversion=2"
|
|
# "proto=tcp"
|
|
];
|
|
};
|
|
};
|
|
|
|
systemd = {
|
|
# paths.host-keytab-modified = {
|
|
# wantedBy = [ "multi-user.target" ];
|
|
# pathConfig = {
|
|
# PathChanged = "/etc/krb5.keytab";
|
|
# Unit = "host-keytab-modified.service";
|
|
# };
|
|
# };
|
|
|
|
# services.host-keytab-modified = {
|
|
# description = "Operations to execute when keytab is changed.";
|
|
# script = "${pkgs.systemd}/bin/systemctl restart rpc-gssd.service";
|
|
# };
|
|
|
|
services.host-keytab-watcher = {
|
|
wantedBy = [ "rpc-gssd.service" "rpc-svcgssd.service" ];
|
|
before = [ "rpc-gssd.service" "rpc-svcgssd.service" ];
|
|
unitConfig = { ConditionPathExists = [ "/etc/krb5.keytab" ]; };
|
|
serviceConfig = {
|
|
ExecStart = "${pkgs.coreutils}/bin/sleep 500";
|
|
TimeoutStartSec = "3600";
|
|
RemainAfterExit = true;
|
|
};
|
|
};
|
|
};
|
|
|
|
# systemd = {
|
|
# ## This fails if the filesystems already exist
|
|
# # tmpfiles.rules = [
|
|
# # "d /net/documents - root sea-documents - -"
|
|
# # "d /net/downloads - root sea-downloads - -"
|
|
# # "d /net/projects - root sea-projects - -"
|
|
# # ];
|
|
|
|
# mounts = let
|
|
# mkOpts =
|
|
# concatStringsSep ",";
|
|
# in [
|
|
# {
|
|
# enable = true;
|
|
# what = "nostromo.sea.fudo.org:/export/documents";
|
|
# where = "/net/documents";
|
|
# type = "nfs";
|
|
# options = mkOpts [
|
|
# "vers=4"
|
|
# "minorversion=2"
|
|
# "sec=krb5p"
|
|
# "x-systemd.automount"
|
|
# "proto=tcp"
|
|
# ];
|
|
# description = "sea-store documents on encrypted filesysem.";
|
|
# }
|
|
# {
|
|
# enable = true;
|
|
# what = "nostromo.sea.fudo.org:/export/downloads";
|
|
# where = "/net/downloads";
|
|
# type = "nfs";
|
|
# options = mkOpts [
|
|
# "vers=4"
|
|
# "minorversion=2"
|
|
# "sec=krb5i"
|
|
# "x-systemd.automount"
|
|
# "proto=tcp"
|
|
# ];
|
|
# description = "sea-store downloads on encrypted filesysem.";
|
|
# }
|
|
# {
|
|
# enable = true;
|
|
# what = "nostromo.sea.fudo.org:/export/projects";
|
|
# where = "/net/projects";
|
|
# type = "nfs";
|
|
# options = mkOpts [
|
|
# "vers=4"
|
|
# "minorversion=2"
|
|
# "sec=krb5p"
|
|
# "x-systemd.automount"
|
|
# "proto=tcp"
|
|
# ];
|
|
# description = "sea-store projects on encrypted filesysem.";
|
|
# }
|
|
# ];
|
|
# };
|
|
|
|
services.printing = {
|
|
enable = true;
|
|
drivers = [
|
|
# pkgs.brlaser
|
|
# pkgs.brgenml1lpr
|
|
# pkgs.brgenml1cupswrapper
|
|
# pkgs.hll2380dw-cups
|
|
|
|
# pkgs.hll2380dw-lpr
|
|
];
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [ hll2380dw-cups ];
|
|
}
|