mini-2024-12-03-21-19-49

configs/docker.nix

@@ -12,6 +12,8 @@
     };
   };
 
+  users.extraGroups.docker.members = ["alex"];
+
   environment = {
     systemPackages = with pkgs; [
       docker-compose

configs/user.nix

@@ -37,7 +37,6 @@ in {
       hashedPasswordFile = config.sops.secrets.hashedPassword.path;
       extraGroups = [
         "wheel"
-        "docker"
         "networkmanager"
         "lp"
         "nginx"

machine/mini/configuration.nix

@@ -14,7 +14,7 @@
   ];
 
   sops = {
-    defaultSopsFile = ../../secrets-mini.yaml;
+    defaultSopsFile = ../../secrets/secrets-mini.yaml;
   };
 
   boot = {
@@ -95,28 +95,11 @@
         "/persist/borg"
       ];
     };
-  };
 
-  virtualisation = {
+    locate = {
-    libvirtd = {
+      prunePaths = [ "/mnt" "/nix" ];
-      enable = true;
-      qemu = {
-        package = pkgs.qemu_kvm;
-        swtpm.enable = true;
-        ovmf = {
-          enable = true;
-          packages = [
-            (pkgs.OVMF.override {
-              secureBoot = true;
-              tpmSupport = true;
-            })
-            .fd
-          ];
     };
   };
-    };
-    spiceUSBRedirection.enable = true;
-  };
 
   powerManagement = {
     enable = true;