blob: be03f3ca7d01451243775480fc2669a975300934 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
|
{
config,
pkgs,
lib,
...
}: with lib; {
imports = [ (mkAliasOptionModule [ "ivi" ] [ "users" "users" ivi.username ]) ];
services.resolved.fallbackDns = [
"1.1.1.1#one.one.one.one"
"1.0.0.1#one.one.one.one"
"2606:4700:4700::1111#one.one.one.one"
"2606:4700:4700::1001#one.one.one.one"
];
time.timeZone = "Europe/Amsterdam";
users.users = {
${ivi.username} = {
uid = 1000;
isNormalUser = true;
description = ivi.realName;
extraGroups = ["wheel" "networkmanager" "docker" "transmission"];
openssh.authorizedKeys.keys = ivi.sshKeys;
};
root = {
openssh.authorizedKeys.keys = config.ivi.openssh.authorizedKeys.keys;
};
};
security = {
sudo = {
wheelNeedsPassword = false;
extraConfig = ''
Defaults env_keep+="EDITOR"
Defaults env_keep+="SSH_CONNECTION SSH_CLIENT SSH_TTY"
Defaults env_keep+="http_proxy https_proxy"
'';
};
};
environment.systemPackages = with pkgs; [
man-pages
man-pages-posix
vim
wget
git
subversion
htop
jq
yq-go
curl
fd
lf
ripgrep
parallel
pinentry-curses
gnused
gnutls
pciutils
dnsutils
iputils
inetutils
usbutils
zoxide
binwalk
unzip
];
nix.package = pkgs.nixUnstable;
nix.extraOptions = ''
experimental-features = nix-command flakes
'';
}
|
