jackos1998
d51f2d62b6
Add a top-level README mapping the boxes and a full docs/ tree: topic pages (architecture, networking, deployment), per-site box pages for colony and home with containers nested under their hosts, remote and mobile boxes, the installer, and the home switch fabric reference (folded in from home-switches.md, with AGENTS.md and code comments retargeted to its new home). Box pages carry marked assignment tables that CI regenerates from nixos.allAssignments. AGENTS.md points at the new docs and keeps its terse agent version of the mechanics, referring to the topic pages for depth.
1.5 KiB
1.5 KiB
tower
Portable workstation — a Framework Laptop 13 (Intel), running the full GUI environment.
- Source:
nixos/boxes/tower/default.nix - Host: physical (laptop)
Role
- Personal portable workstation:
my.gui.enable, with Sway managed by home-manager. - Joins the tailnet through the headscale on
britway(fish abbrtsup=doas tailscale up --login-server=https://hs.nul.ie --accept-routes).
Hardware / platform
- Intel platform: microcode updates,
kvm-intel,intel_iommu=on,intel-media-driverfor graphics; latest kernel (lib.my.c.kernel.latest). - Thunderbolt security (
bolt), Bluetooth (blueman+ tray applet), fingerprint reader (fprintd;doaspersists auth forwheel). tlppower management, including battery charge thresholds (start 90% / stop 97%).
Storage
- Two LUKS-encrypted partitions,
persistandhome(bothallowDiscards);/nixis a separate ext4 filesystem,/bootis vfat. - Persistent
/home(my.user.tmphome = false) with an 8G tmpfs root (my.tmproot.size = "8G").
Networking / services
- NetworkManager (
wpa_supplicantbackend) withsystemd-resolved; networkdwait-onlineis disabled. The Wi-Fi interface is renamed towifiby MAC. - Steam and Wireshark enabled;
fstrim, LVM thin provisioning. nix.gc.automatic = false— GC is run manually on the laptop.
Notable config files
nixos/boxes/tower/default.nix— the whole box (single file).