oizys/hosts/algiz/configuration.nix

132 lines
2.6 KiB
Nix
Raw Normal View History

2023-05-03 16:32:06 -05:00
{ inputs, lib, config, pkgs, ... }:
{
imports = [
./hardware-configuration.nix
];
security.sudo.wheelNeedsPassword = false;
2023-05-03 22:38:07 -05:00
2023-07-09 11:32:38 -05:00
nixpkgs.config.allowUnfree = true;
2023-07-09 11:38:43 -05:00
2023-05-04 10:57:14 -05:00
nix.package = pkgs.nixUnstable;
nix.extraOptions = ''
experimental-features = nix-command flakes
'';
users.defaultUserShell = pkgs.zsh;
2023-05-03 16:32:06 -05:00
users.extraUsers = {
daylin = {
isNormalUser = true;
extraGroups = [ "wheel" "docker" ];
useDefaultShell = true;
initialPassword = "nix";
};
git = {
isNormalUser = true;
};
};
services.resolved.enable = true;
2023-07-09 11:32:38 -05:00
services.fail2ban.enable = true;
2023-05-03 16:32:06 -05:00
boot.kernelPackages = pkgs.linuxPackages_latest;
services.cron = {
enable = true;
systemCronJobs = [
# update repos
"0 * * * * make -C /home/daylin/git soft-repos"
# update container so home page is semi-accurate
"0 2 * * * make -C /home/daylin/git update-soft-serve"
];
};
2023-05-03 16:32:17 -05:00
networking.hostName = "algiz";
2023-05-04 10:57:14 -05:00
# added to make using `pip install` work in docker build
2023-07-09 11:38:43 -05:00
networking.nameservers = [
2023-05-04 10:57:14 -05:00
"8.8.8.8"
];
2023-05-03 16:32:06 -05:00
time.timeZone = "America/Chicago";
programs.zsh.enable = true;
2023-05-04 09:58:03 -05:00
virtualisation.docker.enable = true;
2023-05-03 16:32:06 -05:00
programs.nix-ld.enable = true;
programs.nix-ld.libraries = with pkgs; [
stdenv.cc.cc
curl # for choosenim
];
environment.systemPackages = with pkgs; [
zsh
tmux
wget
unzip
less
gnumake
gcc
gnupg
curl
git
vim
neovim
starship
atuin
chezmoi
bat
fzf
delta
ripgrep
lsd
gh
lazygit
nixpkgs-fmt
lazydocker
python3
micromamba
nodejs
go
rustup
];
# Use the GRUB 2 boot loader.
boot.loader.grub.enable = true;
boot.loader.grub.device = "/dev/vda"; # or "nodev" for efi only
programs.gnupg.agent = {
2023-05-03 16:32:17 -05:00
enable = true;
enableSSHSupport = true;
};
2023-05-03 16:32:06 -05:00
2023-05-03 22:38:07 -05:00
# allow tcp connections for git.dayl.in (gitea)
networking.firewall = {
enable = true;
allowedTCPPorts = [ 80 443 ];
};
2023-05-03 16:32:06 -05:00
# Enable the OpenSSH daemon.
2023-05-04 10:57:14 -05:00
services.openssh.enable = true;
2023-07-25 10:59:35 -05:00
services.openssh.settings.PasswordAuthentication = false;
2023-05-04 10:57:14 -05:00
2023-05-03 16:32:06 -05:00
users.mutableUsers = false;
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. Its perfectly fine and recommended to leave
# this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
system.stateVersion = "22.11"; # Did you read the comment?
}