all: add module config.nodeconfig.is-server

hosts/layne/default.nix

@@ -10,6 +10,7 @@ _: {
   nodeconfig = {
     minimize = true;
     nix.auto-gc = true;
+    is-server = true;
   };
 
   environment.sessionVariables = {

hosts/rico0/default.nix

@@ -12,6 +12,7 @@ _: {
     minimize = true;
     nix.auto-gc = true;
     is-pi = true;
+    is-server = true;
   };
 
   i18n = {

hosts/rico1/default.nix

@@ -12,6 +12,7 @@ _: {
     minimize = true;
     nix.auto-gc = true;
     is-pi = true;
+    is-server = true;
   };
 
   i18n = {

hosts/rico2/default.nix

@@ -12,6 +12,7 @@ _: {
     minimize = true;
     nix.auto-gc = true;
     is-pi = true;
+    is-server = true;
   };
 
   i18n = {

hosts/shared/networkd.nix

@@ -2,25 +2,28 @@ _: {
   networking = {
     useNetworkd = true;
   };
-  systemd.network = {
-    enable = true;
-    networks = {
-      "41-ether" = {
-        enable = true;
-        matchConfig = {
-          Type = "ether";
-        };
-        networkConfig = {
-          DHCP = "yes";
-        };
-        dhcpV4Config = {
-          UseDomains = true;
-        };
-        ipv6AcceptRAConfig = {
-          UseDomains = true;
-        };
-        linkConfig = {
-          RequiredForOnline = "yes";
+  systemd = {
+    network = {
+      enable = true;
+      wait-online.enable = false;
+      networks = {
+        "41-ether" = {
+          enable = true;
+          matchConfig = {
+            Type = "ether";
+          };
+          networkConfig = {
+            DHCP = "yes";
+          };
+          dhcpV4Config = {
+            UseDomains = true;
+          };
+          ipv6AcceptRAConfig = {
+            UseDomains = true;
+          };
+          linkConfig = {
+            RequiredForOnline = "yes";
+          };
         };
       };
     };

hosts/wynne/default.nix

@@ -10,6 +10,7 @@ _: {
   nodeconfig = {
     minimize = true;
     nix.auto-gc = true;
+    is-server = true;
   };
 
   environment.sessionVariables = {

modules/default.nix

@@ -3,6 +3,7 @@ _: {
     ./general.nix
     ./nix.nix
     ./pi.nix
+    ./server.nix
     ./wireguard.nix
   ];
 }

modules/general.nix

@@ -18,6 +18,7 @@ let cfg = config.nodeconfig; in {
       nixos.enable = lib.mkDefault false;
     };
 
+    fonts.fontconfig.enable = lib.mkDefault false;
     programs.command-not-found.enable = lib.mkDefault false;
 
     xdg = {
@@ -25,6 +26,7 @@ let cfg = config.nodeconfig; in {
       icons.enable = lib.mkDefault false;
       mime.enable = lib.mkDefault false;
       sounds.enable = lib.mkDefault false;
+      menus.enable = lib.mkDefault false;
     };
   };
 }

modules/server.nix

@@ -0,0 +1,38 @@
+{ lib, config, ... }:
+let cfg = config.nodeconfig; in {
+  options.nodeconfig = {
+    is-server = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      example = true;
+      description = "configure node as a server";
+    };
+  };
+  config = lib.mkIf cfg.is-server {
+    boot.kernel.sysctl = {
+      "net.core.default_qdisc" = "fq";
+      "net.ipv4.tcp_congestion_control" = "bbr";
+    };
+    networking.firewall = {
+      allowPing = true;
+      logRefusedConnections = lib.mkDefault false;
+    };
+    systemd = {
+      services = {
+        NetworkManager-wait-online.enable = false;
+        systemd-networkd.stopIfChanged = false;
+        systemd-resolved.stopIfChanged = false;
+      };
+      enableEmergencyMode = false;
+      watchdog = {
+        runtimeTime = "15s";
+        rebootTime = "30s";
+        kexecTime = "1m";
+      };
+      sleep.extraConfig = ''
+        AllowSuspend=no
+        AllowHibernation=no
+      '';
+    };
+  };
+}