nix/nixos/common.nix

195 lines
3.4 KiB
Nix
Raw Normal View History

2023-09-05 23:11:14 -05:00
{ config, lib, pkgs, inputs, ... }: {
environment = {
variables = {
EDITOR = "hx";
VISUAL = "hx";
PAGER = "less";
MANPAGER = "less";
};
systemPackages = with pkgs; [
age
bat
bind
bottom
2023-09-06 00:57:08 -05:00
btrfs-progs
2023-09-05 23:11:14 -05:00
curl
dog
dua
exa
fd
file
gnumake
2023-09-05 23:51:32 -05:00
gron
2023-09-05 23:11:14 -05:00
hexyl
htop
iputils
2023-09-05 23:51:32 -05:00
jq
2023-09-05 23:11:14 -05:00
killall
kitty # TODO: I really just need the terminfo on servers, though, right?
less
mosh
nmap
openssl
pciutils
2023-09-06 00:57:08 -05:00
pv
2023-09-05 23:11:14 -05:00
rclone
restic
ripgrep
rsync
sd
sops
2023-09-05 23:51:32 -05:00
smartmontools
2023-09-06 00:57:08 -05:00
sqlite
2023-09-05 23:11:14 -05:00
unzip
watchexec
wget
xh
zellij
zstd
] ++ [
inputs.helix.packages."x86_64-linux".helix
inputs.rtx.packages."x86_64-linux".rtx
];
};
2023-09-05 22:39:17 -05:00
users.users = {
daniel = {
isNormalUser = true;
home = "/home/daniel/.home";
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAPLXOjupz3ScYjgrF+ehrbp9OvGAWQLI6fplX6w9Ijb daniel@lyte.dev"
];
2023-09-06 00:57:08 -05:00
group = "daniel";
extraGroups = [ "users" "wheel" "video" ];
2023-09-05 22:39:17 -05:00
packages = [ ];
};
root = {
openssh.authorizedKeys.keys = config.users.users.daniel.openssh.authorizedKeys.keys;
};
};
i18n = {
defaultLocale = "en_US.UTF-8";
};
services = {
xserver = {
layout = "us";
xkbOptions = "ctrl:nocaps";
};
openssh = {
enable = true;
2023-09-05 23:11:14 -05:00
settings = {
PasswordAuthentication = false;
};
# tailscale handles this I think
openFirewall = lib.mkDefault false;
# listenAddresses = [
# { addr = "0.0.0.0"; port = 22; }
# ];
};
tailscale = {
enable = true;
useRoutingFeatures = lib.mkDefault "client";
2023-09-05 22:39:17 -05:00
};
2023-09-05 23:51:32 -05:00
fwupd.enable = true;
smartd.enable = true;
2023-09-05 22:39:17 -05:00
};
console = {
font = "Lat2-Terminus16";
useXkbConfig = true;
earlySetup = true;
# colors = [
# "111111"
# "f92672"
# "a6e22e"
# "f4bf75"
# "66d9ef"
# "ae81ff"
# "a1efe4"
# "f8f8f2"
# "75715e"
# "f92672"
# "a6e22e"
# "f4bf75"
# "66d9ef"
# "ae81ff"
# "a1efe4"
# "f9f8f5"
# ];
};
networking = {
useDHCP = lib.mkDefault true;
2023-09-05 23:11:14 -05:00
firewall = {
enable = lib.mkDefault true;
allowPing = lib.mkDefault true;
allowedTCPPorts = lib.mkDefault [ ];
allowedUDPPorts = lib.mkDefault [ ];
};
2023-09-05 22:39:17 -05:00
};
nix = {
settings = {
experimental-features = lib.mkDefault [ "nix-command" "flakes" ];
2023-09-06 00:57:08 -05:00
substituters = [
"https://nix.h.lyte.dev"
"https://nix-community.cachix.org"
"https://cache.nixos.org/"
];
trusted-public-keys = [
"h.lyte.dev:HeVWtne31ZG8iMf+c15VY3/Mky/4ufXlfTpT8+4Xbs0="
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
];
2023-09-05 22:39:17 -05:00
};
};
nixpkgs = {
config = {
allowUnfree = true;
};
hostPlatform = lib.mkDefault "x86_64-linux";
};
2023-09-05 23:51:32 -05:00
programs = {
fish = {
enable = true;
};
tmux = {
enable = true;
clock24 = true;
};
traceroute.enable = true;
git = {
enable = true;
lfs = {
2023-09-05 22:39:17 -05:00
enable = true;
};
};
2023-09-05 23:51:32 -05:00
};
2023-09-05 22:39:17 -05:00
time = {
timeZone = "America/Chicago";
};
users = {
defaultUserShell = pkgs.fish;
};
}