Merge pull request 'media-pc' (#48) from media-pc into master

Reviewed-on: #48

flake.nix

@@ -236,6 +236,15 @@
             ./hosts/nrec-nixos02
           ];
         };
+        media1 = nixpkgs.lib.nixosSystem {
+          inherit system;
+          specialArgs = {
+            inherit inputs self;
+          };
+          modules = commonModules ++ [
+            ./hosts/media1
+          ];
+        };
         openstack-template = nixpkgs.lib.nixosSystem {
           inherit system;
           specialArgs = {

hosts/media1/configuration.nix

@@ -0,0 +1,84 @@
+{
+  pkgs,
+  ...
+}:
+
+{
+  imports = [
+    ./hardware-configuration.nix
+    ../../system
+  ];
+
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  networking.hostName = "media1";
+  networking.domain = "home.2rjus.net";
+  networking.useNetworkd = true;
+  networking.useDHCP = false;
+  networking.firewall.enable = false;
+  services.resolved.enable = true;
+  networking.nameservers = [
+    "10.69.13.5"
+    "10.69.13.6"
+  ];
+
+  systemd.network.enable = true;
+  systemd.network.networks."10-lan" = {
+    matchConfig.Name = "enp*";
+    address = [
+      "10.69.31.51/24"
+    ];
+    routes = [
+      { Gateway = "10.69.31.1"; }
+    ];
+    linkConfig.RequiredForOnline = "routable";
+  };
+
+  time.timeZone = "Europe/Oslo";
+
+  homelab.host = {
+    tier = "prod";
+    priority = "low";
+    role = "media";
+  };
+
+  # Intel N100 (Alder Lake-N) graphics
+  hardware.graphics = {
+    enable = true;
+    extraPackages = with pkgs; [
+      intel-media-driver # VA-API driver for Broadwell+
+    ];
+  };
+
+  # NFS for media access
+  environment.systemPackages = with pkgs; [
+    nfs-utils
+  ];
+  services.rpcbind.enable = true;
+
+  systemd.mounts = [
+    {
+      type = "nfs";
+      mountConfig = {
+        Options = "ro,soft,noatime";
+      };
+      what = "nas.home.2rjus.net:/mnt/hdd-pool/media";
+      where = "/mnt/nas/media";
+    }
+  ];
+
+  systemd.automounts = [
+    {
+      wantedBy = [ "multi-user.target" ];
+      automountConfig = {
+        TimeoutIdleSec = "5min";
+      };
+      where = "/mnt/nas/media";
+    }
+  ];
+
+  vault.enable = true;
+
+  system.stateVersion = "25.11";
+}

hosts/media1/default.nix

@@ -0,0 +1,7 @@
+{ ... }:
+{
+  imports = [
+    ./configuration.nix
+    ./media-desktop.nix
+  ];
+}

hosts/media1/hardware-configuration.nix

@@ -0,0 +1,33 @@
+# Do not modify this file!  It was generated by 'nixos-generate-config'
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" "sdhci_pci" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/0e1f61fd-18c6-4114-942e-f113a1e4b347";
+      fsType = "ext4";
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/03C8-7DFE";
+      fsType = "vfat";
+      options = [ "fmask=0022" "dmask=0022" ];
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/0871bf99-9db6-4cd7-b307-3cebbb0a4e60"; }
+    ];
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/media1/media-desktop.nix

@@ -0,0 +1,120 @@
+{
+  pkgs,
+  lib,
+  ...
+}:
+
+let
+  kodiPkg = pkgs.kodi-wayland.withPackages (p: [
+    p.jellycon
+    p.sendtokodi
+    p.inputstream-adaptive
+  ]);
+
+  hyprlandConfig = ''
+    # Monitor — auto-detect, native resolution
+    monitor = , preferred, auto, 1
+
+    # Launch Kodi and Firefox on login
+    exec-once = ${lib.getExe' kodiPkg "kodi"}
+    exec-once = ${lib.getExe pkgs.firefox}
+
+    # Workspace rules — Kodi on 1, Firefox on 2
+    windowrulev2 = workspace 1 silent, class:^(kodi)$
+    windowrulev2 = workspace 2 silent, class:^(firefox)$
+    windowrulev2 = fullscreen, class:^(kodi)$
+    windowrulev2 = fullscreen, class:^(firefox)$
+
+    # Start on workspace 1 (Kodi)
+    workspace = 1, default:true
+
+    # Switch workspaces with Super+1/2
+    bind = SUPER, 1, workspace, 1
+    bind = SUPER, 2, workspace, 2
+
+    # No gaps, no borders — TV setup
+    general {
+      gaps_in = 0
+      gaps_out = 0
+      border_size = 0
+    }
+
+    decoration {
+      rounding = 0
+    }
+
+    # Disable animations for snappy switching
+    animations {
+      enabled = false
+    }
+
+    misc {
+      # Disable Hyprland logo/splash
+      disable_hyprland_logo = true
+      disable_splash_rendering = true
+    }
+  '';
+in
+{
+  # Hyprland compositor with UWSM for proper dbus/systemd session management
+  programs.hyprland = {
+    enable = true;
+    withUWSM = true;
+    portalPackage = pkgs.xdg-desktop-portal-hyprland;
+  };
+
+  # greetd for auto-login — UWSM starts Hyprland as a systemd session
+  services.greetd = {
+    enable = true;
+    settings = {
+      default_session = {
+        command = "uwsm start hyprland-uwsm.desktop";
+        user = "kodi";
+      };
+    };
+  };
+
+  # Deploy Hyprland config to kodi user's XDG config dir
+  systemd.tmpfiles.rules = [
+    "d /home/kodi/.config/hypr 0755 kodi kodi -"
+  ];
+  environment.etc."skel/hypr/hyprland.conf".text = hyprlandConfig;
+  system.activationScripts.hyprlandConfig = lib.stringAfter [ "users" ] ''
+    install -D -o kodi -g kodi -m 0644 /dev/stdin /home/kodi/.config/hypr/hyprland.conf <<'HYPRCONF'
+    ${hyprlandConfig}
+    HYPRCONF
+  '';
+
+  # Kodi user
+  users.users.kodi = {
+    isNormalUser = true;
+    home = "/home/kodi";
+    group = "kodi";
+    extraGroups = [
+      "video"
+      "audio"
+      "input"
+    ];
+  };
+  users.groups.kodi = { };
+
+  # Packages available on the system
+  environment.systemPackages = [
+    kodiPkg
+    pkgs.firefox
+    pkgs.yt-dlp
+  ];
+
+  # PipeWire for audio (HDMI passthrough support)
+  services.pipewire = {
+    enable = true;
+    alsa.enable = true;
+    pulse.enable = true;
+  };
+
+  # Allow VA-API hardware decode in Firefox
+  environment.sessionVariables = {
+    MOZ_ENABLE_WAYLAND = "1";
+    LIBVA_DRIVER_NAME = "iHD";
+  };
+}

terraform/vault/hosts-generated.tf

@@ -63,6 +63,11 @@ locals {
         "secret/data/hosts/pn02/*",
       ]
     }
+    "media1" = {
+      paths = [
+        "secret/data/hosts/media1/*",
+      ]
+    }
 
   }