kbuilder.nix

{ config, pkgs, lib, ... }: {

  imports = [
      ./common.nix
      ./passwords.nix
  ];

  boot.initrd.availableKernelModules = [ "uhci_hcd" "ehci_pci" "ahci" "usb_storage" ];
  boot.loader.grub.enable = true;
  boot.loader.grub.device = "/dev/sda";
  boot.loader.grub.gfxmodeBios = "text";
  boot.loader.grub.copyKernels = true; # Loading stuff from XFS is dog slow otherwise
  boot.kernelPackages = pkgs.linuxPackages_latest;
  boot.kernelParams = ["nopti"];

  fileSystems."/" = {
    device = "/dev/disk/by-uuid/8b6b4c2d-7061-4bd3-af13-fdbe68508967";
    fsType = "xfs";
  };

  swapDevices = [
    { device = "/dev/disk/by-uuid/6c060441-95ac-40f7-b92b-118a077ab0e0"; }
  ];

  hardware.enableRedistributableFirmware = true;

  environment.systemPackages = with pkgs; [
    picocom

    # TODO: migrate arm-builder.sh away from nix-push
    (pkgs.writeScriptBin "nix-push" ''exec ${pkgs.nix1}/bin/nix-push "$@"'')
  ];

  services.nix-serve.enable = true;
  services.logind.extraConfig = ''
    HandleLidSwitch=ignore
  '';

  networking = {
    wireless.enable = true;
    useDHCP = false;

    hostName = "kbuilder";
    hostId = "c809225e";
    extraHosts = ''
      10.0.0.1 kbuilder
      10.0.0.2 raspi
      10.0.0.10 jetson
      10.0.0.11 pcduino
    '';

    interfaces = {
      enp9s0 = { ip4 = [{ address = "10.0.0.1"; prefixLength = 8; }]; };
      wlp5s0b1 = { useDHCP = true; };
    };

    firewall = {
      enable = lib.mkForce true;
      allowPing = true;
      logRefusedConnections = false;
      rejectPackets = false;
      allowedTCPPorts = [ 5000 ];
      allowedTCPPortRanges = [{ from = 220; to = 230; }];
      trustedInterfaces = ["enp9s0"];
    };

    nat = {
      enable = true;
      externalInterface = "wlp5s0b1";
      internalInterfaces = ["enp9s0"];
      forwardPorts = [
        { sourcePort = 223; destination = "10.0.0.2:22"; }    # SSH on raspi
        { sourcePort = 224; destination = "10.0.0.10:22"; }   # SSH on jetson
        { sourcePort = 225; destination = "10.0.0.11:22"; }   # SSH on pcduino
        { sourcePort = 230; destination = "10.0.0.2:230"; }   # jetson-powerctl on raspi
      ];
    };
  };

  services.ddclient = {
    enable = true;
    protocol = "namecheap";
    domains = ["kbuilder"];
    username = "dezgeg.me";
    server = "dynamicdns.park-your-domain.com";
    # password comes from ./passwords.nix
  };

  services.nfs.server = {
    enable = true;
    createMountPoints = true;
    exports = ''
      /srv/nfs    10.0.0.0/8(rw,async,no_subtree_check,no_root_squash,nohide)
    '';
  };

  services.atftpd = {
    enable = true;
    root = "/srv/tftp";
  };

  services.dhcpd4 = {
    enable = true;
    interfaces = ["enp9s0"];
    extraConfig = ''
      option domain-name-servers 8.8.8.8, 8.8.4.4;
      option subnet-mask 255.0.0.0;
      option routers 10.0.0.1;

      default-lease-time 25920000;
      max-lease-time 25920000;

      subnet 10.0.0.0 netmask 255.0.0.0 {
        host raspi {
          hardware ethernet b8:27:eb:63:84:ca;
          fixed-address 10.0.0.2;
        }

        host jetson {
          hardware ethernet 00:04:4b:25:ae:c9;
          fixed-address 10.0.0.10;
          next-server 10.0.0.1;
        }

        host pcduino {
          hardware ethernet 02:4b:05:41:d2:61;
          fixed-address 10.0.0.11;
          next-server 10.0.0.1;
        }
      }
    '';
  };

  # For nix~case~hack fixes
  nix.package = pkgs.nixUnstable;

  nix.readOnlyStore = false; # nix-push --link fails otherwise
  nix.distributedBuilds = true;
  nix.binaryCaches = [ "https://cache.nixos.org" "http://nixos-arm.dezgeg.me/channel" ];
  nix.maxJobs = 4;

  # TODO: ARM board speed factors:
  #   jetson:  rsa 2048 bits 0.002813s 0.000082s    355.5  12158.1
  #   pcduino: rsa 2048 bits 0.021260s 0.000652s     47.0   1534.3
  nix.buildMachines = [
    {
      hostName = "jetson";
      sshUser = "root";
      sshKey = "/etc/nix/remote-build-key.priv"; # Populated in passwords.nix
      system = "armv6l-linux,armv7l-linux";
      maxJobs = 4;
      supportedFeatures = ["big-parallel"];
    }
#    {
#      hostName = "pcduino"; # rsa 2048 bits 0.002813s 0.000082s    355.5  12158.1
#      sshUser = "root";
#      sshKey = "/etc/nix/remote-build-key.priv"; # Populated in passwords.nix
#      system = "armv7l-linux";
#      maxJobs = 2;
#    }
  ];
}