nix-config/nixos/server/nuc-init/default.nix

# Gigabyte GB-BXCEH-2955 (Celeron 2955U: Haswell)

{ inputs, lib, pkgs, sshMatrix, ... }:
let
  mkNetwork = mac: ipSuffix: {
    matchConfig.MACAddress = mac;
    networkConfig = {
      Address = "192.168.40.${ipSuffix}/24";
      Gateway = "192.168.40.1";
      DNS = "192.168.40.1";
    };
  };

  auto-install-system = pkgs.writeScriptBin "auto-install-system" ''
    macAddr="$(${pkgs.iproute2}/bin/ip address show enp3s0 | grep link/ether | awk '{print $2}')"
    switch $macAddress
      case "f4:4d:30:61:9b:19"
        hostname="nuc0"
      case "f4:4d:30:62:4c:26"
        hostname="nuc1"
      case "f4:4d:30:61:99:ab"
        hostname="nuc2"
      case "f4:4d:30:61:8c:cf"
        hostname="nuc3"
      case "f4:4d:30:61:99:ad"
        hostname="nuc4"
      case "f4:4d:30:61:8a:9d"
        hostname="nuc5"
      case "f4:4d:30:62:4a:76"
        hostname="nuc6"
      case "f4:4d:30:62:4a:43"
        hostname="nuc7"
      case "f4:4d:30:61:9a:e0"
        hostname="nuc8"
      case "f4:4d:30:61:99:ed"
        hostname="nuc9"
      case '*'
        hostname=""
    end

    if [ -z "$hostname" ]
      echo "No hostname determined. auto-install-system will exit now.
      exit 1
    fi

    if [ ! -d "$HOME/ws/nix-config/.git" ]; then
      git clone https://github.com/gburd/nix-config.git "$HOME/ws/nix-config"
    fi

    cd "$HOME/ws/nix-config"

    nixos-rebuild --flake .#$hostname
  '';
in
{
  imports = [
    inputs.nixos-hardware.nixosModules.common-cpu-intel
    inputs.nixos-hardware.nixosModules.common-gpu-intel
    inputs.nixos-hardware.nixosModules.common-pc
    inputs.nixos-hardware.nixosModules.common-pc-ssd
    ../../_mixins/hardware/systemd-boot.nix
  ];

  boot = {
    initrd.availableKernelModules = [ "xhci_pci" "ehci_pci" "ahci" "usbhid" "uas" ];
    kernelModules = [ "kvm-intel" ];
    kernelPackages = lib.mkDefault pkgs.linuxPackages_5_15;
  };

  # ensure we aren't defaulting to NetworkManager with DHCP on
  networking.useDHCP = false;

  systemd.network = {
    enable = true;
    networks = {
      "10-lan-200" = mkNetwork "F4:4D:30:61:9B:19" "200";
      "10-lan-201" = mkNetwork "F4:4D:30:62:4C:26" "201";
      "10-lan-202" = mkNetwork "F4:4D:30:61:99:AB" "202";
      "10-lan-203" = mkNetwork "F4:4D:30:61:8C:CF" "203";
      "10-lan-204" = mkNetwork "F4:4D:30:61:99:AD" "204";
      "10-lan-205" = mkNetwork "F4:4D:30:61:8A:9D" "205";
      "10-lan-206" = mkNetwork "F4:4D:30:62:4A:76" "206";
      "10-lan-207" = mkNetwork "F4:4D:30:62:4A:43" "207";
      "10-lan-208" = mkNetwork "F4:4D:30:61:9A:E0" "208";
      "10-lan-209" = mkNetwork "F4:4D:30:61:99:ED" "209";
    };
  };

  config.environment.systemPackages = [ auto-install-system ];

  programs.fish.interactiveShellInit = ''
    auto-install-system
  '';

  # allow remote deployments via root user
  users.users.root.openssh.authorizedKeys.keys = sshMatrix.groups.privileged_users;

  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
}