2022-10-09 23:14:55 -04:00
|
|
|
os_flavor: "freebsd"
|
2024-04-22 17:23:20 -04:00
|
|
|
custom_repo: "https://freebsdpkg.fizz.buzz/repo/14broadwell-default-computer"
|
|
|
|
|
pkgbase_url: "https://freebsdpkg.fizz.buzz/pkgbase/14broadwell-repo/FreeBSD:14:amd64/latest"
|
2022-10-10 22:31:22 -04:00
|
|
|
zfs_snapshot_datasets:
|
2023-08-21 00:25:33 -04:00
|
|
|
- path: zroot/freebsd/computer/be
|
|
|
|
|
- path: zmass/encrypted/vm
|
2024-07-06 11:36:49 -04:00
|
|
|
- path: zmass/encrypted/data
|
2024-04-22 17:23:20 -04:00
|
|
|
users:
|
|
|
|
|
talexander:
|
|
|
|
|
initialize: true
|
|
|
|
|
uid: 11235
|
|
|
|
|
gid: 11235
|
|
|
|
|
groups:
|
|
|
|
|
- name: wheel
|
|
|
|
|
- name: video
|
|
|
|
|
- name: u2f
|
|
|
|
|
- name: operator # To be able to shutdown without root
|
|
|
|
|
- name: webcamd
|
|
|
|
|
gid: 145
|
|
|
|
|
authorized_keys:
|
|
|
|
|
- yubikey
|
|
|
|
|
- main_fido
|
|
|
|
|
- backup_fido
|
|
|
|
|
- homeassistant
|
|
|
|
|
gitconfig: "gitconfig_home"
|
2022-10-11 23:51:42 -04:00
|
|
|
sshd_enabled: true
|
2022-10-12 00:01:57 -04:00
|
|
|
sshd_conf: "sshd_config"
|
2024-07-12 21:44:43 -04:00
|
|
|
prefer_ipv6: true
|
|
|
|
|
dummynet_config: "dnctl.conf"
|
2022-10-12 21:23:40 -04:00
|
|
|
pf_config: "homeserver_pf.conf"
|
2022-10-12 22:11:39 -04:00
|
|
|
pflog_conf:
|
|
|
|
|
- name: 0
|
|
|
|
|
dev: pflog0
|
2022-10-14 01:29:40 -04:00
|
|
|
network_rc: "homeserver_network.conf"
|
2022-10-14 01:55:15 -04:00
|
|
|
rc_conf: "homeserver_rc.conf"
|
2022-10-14 01:59:15 -04:00
|
|
|
loader_conf: "homeserver_loader.conf"
|
2022-10-15 19:51:54 -04:00
|
|
|
cputype: "intel"
|
2022-10-15 20:54:58 -04:00
|
|
|
hwpstate: false
|
2023-11-24 10:25:16 -05:00
|
|
|
devfs_rules: "homeserver_devfs.rules"
|
2022-11-03 00:07:44 -04:00
|
|
|
jail_zfs_dataset: zmass/encrypted/jails
|
2024-06-29 15:21:27 -04:00
|
|
|
jail_zfs_dataset_mountpoint: /jail
|
2022-11-12 17:04:25 -05:00
|
|
|
jail_canmount: "on"
|
|
|
|
|
jail_bemount: "on"
|
2022-11-03 00:07:44 -04:00
|
|
|
jail_list:
|
2022-12-02 22:13:32 -05:00
|
|
|
- name: nat_dhcp
|
|
|
|
|
dataset: zmass/unencrypted/jails
|
|
|
|
|
enabled: true
|
|
|
|
|
conf:
|
|
|
|
|
src: nat_dhcp
|
2022-11-03 00:07:44 -04:00
|
|
|
- name: cloak
|
|
|
|
|
conf:
|
|
|
|
|
src: cloak
|
|
|
|
|
- name: dagger
|
|
|
|
|
conf:
|
|
|
|
|
src: dagger
|
2024-06-30 16:18:55 -04:00
|
|
|
- name: olddagger
|
|
|
|
|
conf:
|
|
|
|
|
src: olddagger
|
2024-06-29 23:32:36 -04:00
|
|
|
- name: sftp
|
|
|
|
|
conf:
|
|
|
|
|
src: sftp
|
2024-06-30 23:02:23 -04:00
|
|
|
fstab: sftp_fstab
|
2024-07-01 22:01:07 -04:00
|
|
|
- name: bastion
|
|
|
|
|
conf:
|
|
|
|
|
src: bastion
|
|
|
|
|
fstab: fstab_bastion
|
|
|
|
|
- name: certificate
|
|
|
|
|
conf:
|
|
|
|
|
src: certificate
|
2024-08-14 21:25:49 -04:00
|
|
|
- name: momlaptop
|
|
|
|
|
conf:
|
|
|
|
|
src: momlaptop
|
2024-06-30 12:30:46 -04:00
|
|
|
# - name: mumble
|
|
|
|
|
# conf:
|
|
|
|
|
# src: mumble
|
|
|
|
|
# persist:
|
|
|
|
|
# - name: mumbledb
|
|
|
|
|
# mount: /var/db/murmur
|
2022-11-03 00:07:44 -04:00
|
|
|
bhyve_dataset: zmass/encrypted/vm
|
2024-10-13 22:49:12 -04:00
|
|
|
# Disable mounting bhyve dataset so it doesn't hide the unencrypted linfi vm
|
|
|
|
|
bhyve_canmount: "off"
|
|
|
|
|
bhyve_mountpoint: "none"
|
2022-11-12 17:04:25 -05:00
|
|
|
bhyve_bemount: "on"
|
2022-12-04 02:37:20 -05:00
|
|
|
wireguard_directory: homeserver
|
|
|
|
|
enabled_wireguard:
|
|
|
|
|
- wgh
|
2024-10-13 22:49:12 -04:00
|
|
|
linfi:
|
|
|
|
|
enabled: true
|
|
|
|
|
zfs_dataset: zmass/unencrypted/vm/linfi
|
|
|
|
|
zfs_mountpoint: /vm/linfi
|
2024-11-17 21:29:42 -05:00
|
|
|
driver_blocklist: "ath if_ath if_ath_pci ath_hal if_iwm if_iwlwifi"
|
2024-10-13 22:49:12 -04:00
|
|
|
pci_blocklist: "6/0/0"
|
|
|
|
|
amd: false
|
