add office server + adsb

hosts/office-server.nix

@@ -54,41 +54,66 @@ in
     nvidiaSettings = true;
   };
 
-  # Network Configuration
-  networking.networkmanager.enable = true;
-
-  # Download Model
-  systemd.services.download-model = {
-    description = "Download Model";
-    wantedBy = [ "multi-user.target" ];
-    before = [ "llama-cpp.service" ];
-    path = [ pkgs.curl pkgs.coreutils ];
-    serviceConfig = {
-      Type = "oneshot";
-      RemainAfterExit = true;
-      User = "root";
-      Group = "root";
-    };
-    script = ''
-      set -euo pipefail
-
-      if [ ! -f "${modelPath}" ]; then
-        mkdir -p "${modelDir}"
-        # Add -f flag to follow redirects and -L for location
-        # Add --fail flag to exit with error on HTTP errors
-        # Add -C - to resume interrupted downloads
-        curl -f -L -C - \
-          -H "Accept: application/octet-stream" \
-          --retry 3 \
-          --retry-delay 5 \
-          --max-time 1800 \
-          "${modelUrl}" \
-          -o "${modelPath}.tmp" && \
-        mv "${modelPath}.tmp" "${modelPath}"
-      fi
-    '';
+  # Networking Configuration
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [
+      1234 # RTL-TCP
+      8080 # LLama API
+    ];
   };
 
+  # RTL-SDR
+  hardware.rtl-sdr.enable = true;
+
+  systemd.services = {
+    # LLama Download Model
+    download-model = {
+      description = "Download Model";
+      wantedBy = [ "multi-user.target" ];
+      before = [ "llama-cpp.service" ];
+      path = [ pkgs.curl pkgs.coreutils ];
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+        User = "root";
+        Group = "root";
+      };
+      script = ''
+        set -euo pipefail
+
+        if [ ! -f "${modelPath}" ]; then
+          mkdir -p "${modelDir}"
+          # Add -f flag to follow redirects and -L for location
+          # Add --fail flag to exit with error on HTTP errors
+          # Add -C - to resume interrupted downloads
+          curl -f -L -C - \
+            -H "Accept: application/octet-stream" \
+            --retry 3 \
+            --retry-delay 5 \
+            --max-time 1800 \
+            "${modelUrl}" \
+            -o "${modelPath}.tmp" && \
+          mv "${modelPath}.tmp" "${modelPath}"
+        fi
+      '';
+    };
+
+    # RTL-SDR TCP Server Service
+    rtl-tcp = {
+      description = "RTL-SDR TCP Server";
+      after = [ "network.target" ];
+      wantedBy = [ "multi-user.target" ];
+
+      serviceConfig = {
+        ExecStart = "${pkgs.rtl-sdr}/bin/rtl_tcp -a 0.0.0.0 -f 1090000000 -s 2400000";
+        Restart = "on-failure";
+        RestartSec = "10s";
+        User = "root";
+        Group = "root";
+      };
+    };
+  };
 
   # Setup LLama API Service
   systemd.services.llama-cpp = {
@@ -141,7 +166,8 @@ in
   # System Packages
   environment.systemPackages = with pkgs; [
     htop
-    nvtop
+    nvtopPackages.full
+    rtl-sdr
     tmux
     vim
     wget

hosts/usb-image.nix

@@ -0,0 +1,46 @@
+{ pkgs, ... }:
+
+{
+  # Basic System
+  system.stateVersion = "24.11";
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  time.timeZone = "UTC";
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-label/nixos";
+    fsType = "ext4";
+    autoResize = true;
+  };
+
+  # SSH
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = false;
+      PermitRootLogin = "prohibit-password";
+    };
+  };
+
+  # Firewall Configuration
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [
+      22
+    ];
+  };
+
+  # User Authorized Keys
+  users.users.root = {
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIe1n9l9pVF5+kjWJCOt3AvBVf1HOSZkEDZxCWVPSIkr evan@reichard"
+    ];
+    hashedPassword = null;
+  };
+
+  # System Packages
+  environment.systemPackages = with pkgs; [
+    htop
+    tmux
+    vim
+  ];
+}