mirror of
https://github.com/Swarsel/.dotfiles.git
synced 2025-12-06 17:17:22 +01:00
3a272b1fe6
This commit completely restructures the flake. Hosts are now seperate from profile configuration files in hosts/[system]. Nixos and Darwin configurations will be built when present in the respective folders in hosts/
61 lines
1.1 KiB
Nix
61 lines
1.1 KiB
Nix
{ lib, pkgs, ... }:
|
|
{
|
|
|
|
nix.settings = {
|
|
experimental-features = [ "nix-command" "flakes" ];
|
|
warn-dirty = false;
|
|
};
|
|
|
|
boot = {
|
|
# initrd.systemd.enable = true;
|
|
kernelPackages = pkgs.linuxPackages_latest;
|
|
supportedFilesystems = lib.mkForce [ "brtfs" "vfat" ];
|
|
loader = {
|
|
efi.canTouchEfiVariables = true;
|
|
systemd-boot = {
|
|
enable = true;
|
|
configurationLimit = lib.mkDefault 5;
|
|
consoleMode = lib.mkDefault "max";
|
|
};
|
|
};
|
|
};
|
|
|
|
services = {
|
|
qemuGuest.enable = true;
|
|
openssh = {
|
|
enable = true;
|
|
ports = lib.mkDefault [ 22 ];
|
|
settings.PermitRootLogin = "yes";
|
|
authorizedKeysFiles = lib.mkForce [
|
|
"/etc/ssh/authorized_keys.d/%u"
|
|
];
|
|
};
|
|
};
|
|
|
|
security.pam = {
|
|
sshAgentAuth.enable = true;
|
|
services = {
|
|
sudo.u2fAuth = true;
|
|
};
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
curl
|
|
rsync
|
|
ssh-to-age
|
|
sops
|
|
vim
|
|
just
|
|
];
|
|
|
|
programs = {
|
|
git.enable = true;
|
|
zsh.enable = lib.mkDefault true;
|
|
};
|
|
|
|
fileSystems."/boot".options = [ "umask=0077" ];
|
|
|
|
networking.networkmanager.enable = true;
|
|
|
|
|
|
}
|