summaryrefslogtreecommitdiff
path: root/deployment/system.scm
blob: 16d81aa088b86d804e3f0b9fbcc31e31cee53878 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
;;; SPDX-License-Identifier: GPL-3.0-or-later
;;; SPDX-FileCopyrightText: 2026 Marek Paśnikowski <marek@marekpasnikowski.pl>

;;; COPYRIGHT NOTICE
;;;
;;; Copyright 2026, Marek Paśnikowski <marek@marekpasnikowski.pl>

;;; LICENSE NOTICE
;;;
;;; This library is free software: you can redistribute it and/or modify it under the terms of
;;; the GNU General Public License as published by the Free Software Foundation,
;;; either version 3 of the License, or (at your option) any later version.
;;;
;;; This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
;;; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
;;; See the GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License along with this library.
;;; If not, see <https://www.gnu.org/licenses/>.

(define-module (deployment system)
  #:use-module ((deployment services certbot)
                #:prefix deployment:services:certbot:)
  #:use-module ((deployment services cgit)
                #:prefix deployment:services:cgit:)
  #:use-module ((deployment services databases)
                #:prefix deployment:services:databases:)
  #:use-module ((deployment services dns)
                #:prefix deployment:services:dns:)
  #:use-module ((deployment services mail)
                #:prefix deployment:services:mail:)
  #:use-module ((deployment services matrix)
                #:prefix deployment:services:matrix:)
  #:use-module ((deployment services web)
                #:prefix deployment:services:web:)
  #:use-module ((deployment system aisaka)
                #:prefix deployment:system:aisaka:)
  #:use-module ((deployment system akashi)
                #:prefix deployment:system:akashi:)
  #:use-module ((deployment system asakura)
                #:prefix deployment:system:asakura:)
  #:use-module ((deployment system cokolwiek)
                #:prefix deployment:system:cokolwiek:)
  #:use-module ((deployment system mcdowell)
                #:prefix deployment:system:mcdowell:)
  #:use-module ((deployment system rakan)
                #:prefix deployment:system:rakan:)
  #:use-module ((gnu packages tls)
                #:prefix gnu:packages:tls:)
  #:use-module ((gnu packages matrix)
                #:prefix gnu:packages:matrix:)
  #:use-module ((gnu system)
                #:prefix gnu:system:)
  #:use-module ((gnu system file-systems)
                #:prefix gnu:system:file-systems:)
  #:use-module ((gnu system linux-initrd)
                #:prefix gnu:system:linux-initrd:)
  #:use-module ((gnu system locale)
                #:prefix gnu:system:locale:)
  #:use-module ((gnu system nss)
                #:prefix gnu:system:nss:)
  #:use-module ((gnu system pam)
                #:prefix gnu:system:pam:)
  #:use-module ((gnu system shadow)
                #:prefix gnu:system:shadow:)
  #:use-module ((guix diagnostics)
                #:prefix guix:diagnostics:)
  #:use-module ((nongnu packages linux)
                #:prefix nongnu:packages:linux:)
  #:use-module ((nongnu system linux-initrd)
                #:prefix nongnu:system:linux-initrd:)
  #:use-module ((sovereign packages jekyll)
                #:prefix sovereign:packages:jekyll:)
  #:use-module ((sovereign services)
                #:prefix sovereign:services:)
  #:use-module ((sovereign systems)
                #:prefix sovereign:systems:)
  #:use-module ((users id1000)
                #:prefix users:id1000:)
  #:use-module ((users vmail)
                #:prefix users:vmail:))

(define-public aisaka
  (gnu:system:operating-system
   (kernel                  nongnu:packages:linux:linux)
   (kernel-loadable-modules (list))
   (kernel-arguments        gnu:system:%default-kernel-arguments)
   (hurd                    #f)
   (bootloader              deployment:system:aisaka:system-bootloader)
   (label                   (sovereign:systems:operating-system-label* deployment:system:aisaka:system-name
                                                                       gnu:system:this-operating-system))
   (keyboard-layout         deployment:system:aisaka:system-keyboard-layout)
   (initrd                  nongnu:system:linux-initrd:microcode-initrd)
   (initrd-modules          gnu:system:linux-initrd:%base-initrd-modules)
   (firmware                (list nongnu:packages:linux:linux-firmware))
   (host-name               deployment:system:aisaka:system-name)
   (hosts-file              #f)
   (mapped-devices          (list))
   (file-systems            (cons* deployment:system:aisaka:file-system-root
                                   deployment:system:aisaka:file-system-efi
                                   gnu:system:file-systems:%base-file-systems))
   (swap-devices            (list))
   (users                   (cons* users:id1000:uid1000-account
                                   users:vmail:vmail-account
                                   gnu:system:shadow:%base-user-accounts))
   (groups                  (cons* deployment:system:aisaka:vmail-group
                                   gnu:system:shadow:%base-groups))
   (skeletons               (gnu:system:shadow:default-skeletons))
   (issue                   (@@ (gnu system)
                                %default-issue))
   (packages                (cons* sovereign:packages:jekyll:custom-jekyll
                                   gnu:packages:tls:openssl
                                   gnu:system:%base-packages))
   (timezone                "Europe/Warsaw")
   (locale                  sovereign:systems:pl-locale)
   (locale-definitions      sovereign:systems:%sovereign-locale-definitions)
   (locale-libcs            gnu:system:locale:%default-locale-libcs)
   (name-service-switch     gnu:system:nss:%default-nss)
   (essential-services      (gnu:system:operating-system-default-essential-services gnu:system:this-operating-system))
   (services                (cons* deployment:services:certbot:aisaka-certbot-service
                                   deployment:services:cgit:aisaka-cgit-service
                                   deployment:services:mail:dkimproxy-out-service
                                   users:id1000:dovecot-service
                                   deployment:system:aisaka:etc
                                   deployment:system:aisaka:fcgiwrap
                                   deployment:system:aisaka:gitolite
                                   deployment:system:aisaka:guix-home-service
                                   deployment:system:aisaka:guix-publish-service
                                   deployment:system:aisaka:iproute2-networking
                                   deployment:services:dns:aisaka-knot-service
                                   deployment:services:matrix:matrix-service-aisaka
                                   deployment:services:web:aisaka-nginx-service
                                   deployment:system:aisaka:offload-rakan
                                   deployment:services:databases:matrix-postgresql-service
                                   deployment:system:aisaka:radicale
                                   deployment:services:mail:smtp-service-aisaka
                                   deployment:system:aisaka:static-networking
                                   deployment:system:aisaka:%sovereign-services*))
   (pam-services            (gnu:system:pam:base-pam-services))
   (privileged-programs     gnu:system:%default-privileged-programs)
   (setuid-programs         gnu:system:%setuid-programs)
   (sudoers-file            sovereign:systems:%sovereign-sudoers-specification)
   (location                (and=> (current-source-location)
                                   guix:diagnostics:source-properties->location))))

(define-public akashi deployment:system:akashi:system)

(define-public asakura deployment:system:asakura:system)

(define-public cokolwiek deployment:system:cokolwiek:system)

(define-public mcdowell deployment:system:mcdowell:system)

(define-public rakan deployment:system:rakan:system)