2023-07-31 00:21:32 -04:00
|
|
|
|
# Hosts configuration.nix
|
|
|
|
|
{ config, lib, pkgs, inputs, user, ... }:
|
|
|
|
|
{
|
|
|
|
|
nix = {
|
|
|
|
|
settings.auto-optimise-store = true;
|
|
|
|
|
settings.allowed-users = [ "@wheel" ];
|
|
|
|
|
gc = {
|
|
|
|
|
automatic = true;
|
|
|
|
|
dates = "weekly";
|
|
|
|
|
persistent = true;
|
|
|
|
|
options = "--delete-older-than 30d";
|
|
|
|
|
};
|
|
|
|
|
package = pkgs.nixFlakes;
|
|
|
|
|
registry.nixpkgs.flake = inputs.nixpkgs;
|
|
|
|
|
extraOptions = ''
|
|
|
|
|
experimental-features = nix-command flakes
|
|
|
|
|
keep-outputs = true
|
|
|
|
|
keep-derivations = true
|
|
|
|
|
'';
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
# Enable networking
|
|
|
|
|
networking.networkmanager.enable = true;
|
|
|
|
|
|
|
|
|
|
# Locale settings
|
|
|
|
|
time.timeZone = "America/Los_Angeles";
|
|
|
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
|
|
|
i18n.extraLocaleSettings = {
|
|
|
|
|
LC_ADDRESS = "en_US.UTF-8";
|
|
|
|
|
LC_IDENTIFICATION = "en_US.UTF-8";
|
|
|
|
|
LC_MEASUREMENT = "en_US.UTF-8";
|
|
|
|
|
LC_MONETARY = "en_US.UTF-8";
|
|
|
|
|
LC_NAME = "en_US.UTF-8";
|
|
|
|
|
LC_NUMERIC = "en_US.UTF-8";
|
|
|
|
|
LC_PAPER = "en_US.UTF-8";
|
|
|
|
|
LC_TELEPHONE = "en_US.UTF-8";
|
|
|
|
|
LC_TIME = "en_US.UTF-8";
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
# Define a user account. Don't forget to set a password with ‘passwd’.
|
|
|
|
|
users.users.${user.name} = {
|
|
|
|
|
isNormalUser = true;
|
|
|
|
|
extraGroups = [ "networkmanager" "wheel" ];
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
# Allow unfree packages
|
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
|
|
|
|
|
|
# List packages installed in system profile. To search, run:
|
|
|
|
|
# $ nix search wget
|
|
|
|
|
environment = {
|
|
|
|
|
defaultPackages = with pkgs; [
|
|
|
|
|
perl
|
|
|
|
|
rsync
|
|
|
|
|
strace
|
|
|
|
|
];
|
|
|
|
|
systemPackages = with pkgs; [
|
|
|
|
|
curl
|
|
|
|
|
git
|
|
|
|
|
wget
|
|
|
|
|
];
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
programs = {
|
|
|
|
|
mtr.enable = true;
|
|
|
|
|
gnupg.agent = {
|
|
|
|
|
enable = true;
|
|
|
|
|
enableSSHSupport = true;
|
|
|
|
|
};
|
|
|
|
|
neovim = {
|
|
|
|
|
enable = true;
|
|
|
|
|
defaultEditor = true;
|
|
|
|
|
viAlias = true;
|
|
|
|
|
vimAlias = true;
|
|
|
|
|
};
|
|
|
|
|
tmux = {
|
|
|
|
|
enable = true;
|
|
|
|
|
};
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
# Clean logs older than 2d
|
|
|
|
|
services.cron.systemCronJobs = [
|
|
|
|
|
"0 20 * * * root journalctl --vacuum-time=2d"
|
|
|
|
|
];
|
|
|
|
|
|
|
|
|
|
# Enable the OpenSSH daemon.
|
|
|
|
|
services.openssh = {
|
|
|
|
|
enable = true;
|
|
|
|
|
settings = {
|
|
|
|
|
PasswordAuthentication = false;
|
|
|
|
|
KbdInteractiveAuthentication = false;
|
|
|
|
|
};
|
|
|
|
|
allowSFTP = false; # Don't set this if you need sftp
|
|
|
|
|
extraConfig = ''
|
|
|
|
|
AllowTcpForwarding yes
|
|
|
|
|
X11Forwarding no
|
|
|
|
|
AllowAgentForwarding no
|
|
|
|
|
AllowStreamLocalForwarding no
|
|
|
|
|
AuthenticationMethods publickey
|
|
|
|
|
'';
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
system = {
|
|
|
|
|
autoUpgrade = {
|
|
|
|
|
enable = true;
|
|
|
|
|
allowReboot = false;
|
2023-08-02 10:10:29 -04:00
|
|
|
|
channel = "https://channels.nixos.org/nixos-unstable";
|
2023-07-31 00:21:32 -04:00
|
|
|
|
};
|
|
|
|
|
stateVersion = "22.11";
|
|
|
|
|
};
|
|
|
|
|
}
|