mirror of
https://git.sr.ht/~rouven/nixos-config
synced 2024-11-15 05:13:10 +01:00
79 lines
1.7 KiB
Nix
79 lines
1.7 KiB
Nix
{ config, pkgs, ... }:
|
|
{
|
|
imports =
|
|
[
|
|
# Include the results of the hardware scan.
|
|
./hardware-configuration.nix
|
|
./modules/networks
|
|
./modules/backup
|
|
./modules/cache
|
|
./modules/matrix
|
|
./modules/mautrix-telegram
|
|
./modules/seafile
|
|
./modules/vaultwarden
|
|
./modules/nginx
|
|
];
|
|
|
|
nix.settings.system-features = [ "gccarch-tigerlake" ];
|
|
boot = {
|
|
loader.systemd-boot.enable = true;
|
|
loader.efi.canTouchEfiVariables = true;
|
|
tmp.useTmpfs = true;
|
|
kernelPackages = pkgs.linuxPackages_latest;
|
|
|
|
};
|
|
services.btrfs.autoScrub.enable = true;
|
|
|
|
environment.persistence."/nix/persist/system" = {
|
|
directories = [
|
|
"/etc/ssh"
|
|
"/root/.borgmatic"
|
|
"/root/.local/share/zsh"
|
|
"/root/.config/borg/security"
|
|
];
|
|
files = [
|
|
"/etc/machine-id"
|
|
];
|
|
};
|
|
age.identityPaths = [ "/nix/persist/system/etc/ssh/ssh_host_ed25519_key" ];
|
|
|
|
time.timeZone = "Europe/Berlin";
|
|
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
console = {
|
|
keyMap = "dvorak";
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
vim
|
|
htop-vim
|
|
helix
|
|
lsof
|
|
btdu
|
|
];
|
|
programs.git = {
|
|
enable = true;
|
|
config = {
|
|
user.name = "Rouven Seifert";
|
|
user.email = "rouven@rfive.de";
|
|
};
|
|
};
|
|
|
|
# Enable the OpenSSH daemon.
|
|
services.openssh.enable = true;
|
|
services.journald.gateway.enable = true;
|
|
programs.mosh.enable = true;
|
|
|
|
|
|
users.users.root.initialHashedPassword = "$y$j9T$hYM7FT2hn3O7OWBn9uz8e0$XquxONcPSke6YjdRGwOzGxC0/92hgP7PIB0y0K.Qdr/";
|
|
users.users.root.openssh.authorizedKeys.keyFiles = [
|
|
../../keys/ssh/rouven-thinkpad
|
|
../../keys/ssh/root-thinkpad
|
|
../../keys/ssh/rouven-pixel
|
|
../../keys/ssh/root-falkenstein
|
|
];
|
|
|
|
system.stateVersion = "22.11";
|
|
|
|
}
|