add profiles

2026-10-06 08:48:11 +09:00 · 2026-07-27 18:31:50 +09:00
parent 6bd05887db
commit bf94d1183f
34 changed files with 327 additions and 14 deletions
@@ -0,0 +1,13 @@
+{ lib, pkgs, ... }:
+{
+  home.packages =
+    with pkgs;
+    [
+      bind
+      bun
+      nil
+      python312
+      uv
+    ]
+    ++ lib.optionals stdenv.hostPlatform.isLinux [ drawio ];
+}
@@ -0,0 +1,16 @@
+{
+  description = "software development workload";
+
+  includes = [
+    "applications.arduino"
+    "applications.claude"
+    "applications.codex"
+    "applications.codex-desktop"
+    "applications.docker"
+    "applications.grok"
+    "applications.java"
+    "applications.opencode"
+    "applications.vscode"
+    "applications.zed"
+  ];
+}
@@ -0,0 +1,3 @@
+{
+  documentation.doc.enable = false;
+}
@@ -0,0 +1,10 @@
+{
+  description = "personal communication and browser workload";
+
+  includes = [
+    "applications.chrome"
+    "applications.discord"
+    "applications.slack"
+    "applications.zoom"
+  ];
+}
@@ -0,0 +1,5 @@
+{
+  description = "remote-access workload";
+
+  includes = [ "services.openssh" ];
+}
@@ -0,0 +1,8 @@
+{
+  description = "secure boot and TPM-backed storage";
+
+  includes = [
+    "systems.boot.secure-boot"
+    "systems.boot.storage-crypto"
+  ];
+}
@@ -0,0 +1,8 @@
+{
+  description = "server workload";
+
+  includes = [
+    "applications.docker"
+    "services.openssh"
+  ];
+}
@@ -0,0 +1,5 @@
+{
+  description = "Tailscale client";
+
+  includes = [ "services.tailscale" ];
+}
@@ -0,0 +1,10 @@
+{ lib, ... }:
+{
+  services.tailscale = {
+    useRoutingFeatures = lib.mkForce "client";
+    extraSetFlags = lib.mkForce [
+      "--accept-dns=false"
+      "--accept-routes=true"
+    ];
+  };
+}
@@ -0,0 +1,5 @@
+{
+  description = "Tailscale subnet-router server";
+
+  includes = [ "services.tailscale" ];
+}
@@ -0,0 +1,11 @@
+{ lib, ... }:
+{
+  services.tailscale = {
+    useRoutingFeatures = lib.mkForce "server";
+    extraSetFlags = lib.mkForce [
+      "--accept-dns=false"
+      "--accept-routes=false"
+      "--advertise-routes=10.50.0.0/16"
+    ];
+  };
+}