mirror of
https://git.sr.ht/~rouven/nixos-config
synced 2024-11-15 13:23:11 +01:00
74 lines
1.5 KiB
Nix
74 lines
1.5 KiB
Nix
{ config, pkgs, ... }:
|
|
{
|
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
|
imports =
|
|
[
|
|
# Include the results of the hardware scan.
|
|
./hardware-configuration.nix
|
|
./modules/mail
|
|
./modules/networks
|
|
./modules/nginx
|
|
./modules/pfersel
|
|
./modules/purge
|
|
./modules/trucksimulatorbot
|
|
];
|
|
|
|
boot = {
|
|
loader = {
|
|
grub = {
|
|
enable = true;
|
|
efiSupport = true;
|
|
efiInstallAsRemovable = true;
|
|
device = "/dev/sda";
|
|
};
|
|
efi.efiSysMountPoint = "/boot/efi";
|
|
};
|
|
kernelPackages = pkgs.linuxPackages_latest;
|
|
initrd.systemd.enable = true;
|
|
};
|
|
zramSwap.enable = true;
|
|
|
|
time.timeZone = "Europe/Berlin";
|
|
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
vim
|
|
wget
|
|
htop-vim
|
|
helix
|
|
lsof
|
|
python3
|
|
];
|
|
programs.git = {
|
|
enable = true;
|
|
config = {
|
|
user.name = "Rouven Seifert";
|
|
user.email = "rouven@rfive.de";
|
|
};
|
|
};
|
|
services.qemuGuest.enable = true;
|
|
systemd.services.qemu-guest-agent.path = [ pkgs.shadow ]; # fix root password reset
|
|
|
|
# Enable the OpenSSH daemon.
|
|
services.openssh = {
|
|
enable = true;
|
|
# clean up the logs a bit
|
|
ports = [ 2222 ];
|
|
settings.PasswordAuthentication = false;
|
|
};
|
|
security = {
|
|
audit.enable = true;
|
|
auditd.enable = true;
|
|
};
|
|
users.users.root.openssh.authorizedKeys.keyFiles = [
|
|
../../keys/ssh/rouven-thinkpad
|
|
../../keys/ssh/rouven-pixel
|
|
# ../../keys/ssh/rouven-smartcard
|
|
];
|
|
|
|
system.stateVersion = "22.11";
|
|
|
|
}
|
|
|