124 lines
3.7 KiB
Nix
124 lines
3.7 KiB
Nix
{ self, pkgs, ... }:
|
||
let
|
||
username = import "${self}/username.nix";
|
||
in
|
||
{
|
||
imports = [
|
||
../../modules/cli
|
||
];
|
||
|
||
# Use the systemd-boot EFI boot loader.
|
||
boot.loader = {
|
||
systemd-boot.enable = true;
|
||
efi.canTouchEfiVariables = true;
|
||
};
|
||
|
||
# The rough location
|
||
location = {
|
||
latitude = 46.948;
|
||
longitude = 7.447;
|
||
};
|
||
|
||
# Set your time zone.
|
||
time.timeZone = "Europe/Zurich";
|
||
|
||
networking = {
|
||
enableIPv6 = false;
|
||
firewall.allowedTCPPorts = [ 22 ];
|
||
# firewall.allowedUDPPorts = [ ... ];
|
||
};
|
||
|
||
hardware = {
|
||
cpu.intel.updateMicrocode = true;
|
||
enableRedistributableFirmware = true;
|
||
};
|
||
|
||
programs.mosh.enable = true;
|
||
services = {
|
||
openssh = {
|
||
enable = true;
|
||
permitRootLogin = "no";
|
||
};
|
||
};
|
||
|
||
# Select internationalisation properties.
|
||
i18n.defaultLocale = "en_US.UTF-8";
|
||
console = {
|
||
font = "Lat2-Terminus16";
|
||
keyMap = "us";
|
||
};
|
||
|
||
# Disable the root user
|
||
users.users.root.hashedPassword = "!";
|
||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||
users.users.${username} = {
|
||
isNormalUser = true;
|
||
initialPassword = "password";
|
||
extraGroups = [
|
||
"wheel"
|
||
"networkmanager"
|
||
];
|
||
openssh.authorizedKeys.keys = [
|
||
"ssh-rsa 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 andreas@gwyn"
|
||
|
||
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxBun0BYQaz/WjiP+g5+Hs9/JZnWAuLTpTVYgx/9shJwKS5Zu9K3I115DYOro/lpu0AMeeJca5We2AICcxYcM0lIZvsJqfOnFOHFjgmHxHc6IuzrUPM7msoLneF5lxfJ8ko2/LcFq8EtGlzjkllRpFpp2FtxDviD1lr4mJda4cOuQES4ujH3HP5Shpwa96oqnDENWCL+XPFe+Ur+88tuKTQ2MIX5Iqhs2sMIwsMI1o8HjBi4sMd+kd7qb232XcwWTlP3iIWvq/0D3OxZ6J6uSNyC4UCl781lupLOKrC6ml58RUrYP8nrF0a53+i0hgLuDiCWhj0vkY7W9nJW1no425 andreas@python"
|
||
];
|
||
};
|
||
|
||
# allow non-free packages
|
||
nixpkgs.config.allowUnfree = true;
|
||
|
||
nix = {
|
||
autoOptimiseStore = true;
|
||
package = pkgs.nixFlakes;
|
||
extraOptions = ''experimental-features = nix-command flakes'';
|
||
|
||
# enable garbage collection
|
||
gc = {
|
||
automatic = true;
|
||
dates = "daily";
|
||
options = "--delete-older-than 7d";
|
||
};
|
||
trustedUsers = [ "root" "@wheel" ];
|
||
};
|
||
|
||
|
||
environment.shellAliases = {
|
||
nix-generations = "sudo nix-env --list-generations --profile /nix/var/nix/profiles/system";
|
||
rebuild = "sudo nixos-rebuild -j auto switch";
|
||
};
|
||
|
||
environment.variables = {
|
||
EDITOR = "vim";
|
||
HIGHLIGHT_STYLE = "solarized-light";
|
||
};
|
||
|
||
security.sudo = {
|
||
extraRules = [
|
||
{
|
||
users = [ "andreas" ];
|
||
commands = [
|
||
{
|
||
command = "${pkgs.nixos-rebuild}/bin/nixos-rebuild -j auto switch";
|
||
options = [ "NOPASSWD" ];
|
||
}
|
||
{
|
||
command = "/run/current-system/sw/bin/nixos-rebuild";
|
||
options = [ "NOPASSWD" ];
|
||
}
|
||
];
|
||
}
|
||
];
|
||
};
|
||
|
||
# This value determines the NixOS release from which the default
|
||
# settings for stateful data, like file locations and database versions
|
||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||
# this value at the release version of the first install of this system.
|
||
# Before changing this value read the documentation for this option
|
||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||
system.stateVersion = import ../../version.nix;
|
||
|
||
}
|
||
|