117 lines
2.7 KiB
Nix
117 lines
2.7 KiB
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
imports =
|
|
[
|
|
/etc/nixos/hardware-configuration.nix
|
|
./basic-tools.nix
|
|
./common-sw.nix
|
|
];
|
|
|
|
boot.kernelPackages = pkgs.linuxPackages_latest;
|
|
|
|
nix.useSandbox = true;
|
|
nix.binaryCaches = [ https://cache.nixos.org ];
|
|
nix.trustedBinaryCaches = [ https://cache.nixos.org ];
|
|
nix.extraOptions = ''
|
|
auto-optimise-store = true
|
|
binary-caches-parallel-connections = 10
|
|
'';
|
|
|
|
networking.networkmanager.enable = true;
|
|
networking.firewall.enable = true;
|
|
|
|
time.timeZone = "Europe/Amsterdam";
|
|
|
|
# Enable the OpenSSH daemon.
|
|
services.openssh = {
|
|
enable = true;
|
|
permitRootLogin = "no";
|
|
passwordAuthentication = false;
|
|
};
|
|
programs.ssh.startAgent = false;
|
|
|
|
# Enable CUPS to print documents.
|
|
services.avahi.enable = true; # cups browsing support
|
|
services.printing = {
|
|
enable = true;
|
|
browsing = true;
|
|
drivers = [ pkgs.hplip ];
|
|
};
|
|
|
|
virtualisation.podman = {
|
|
enable = true;
|
|
dockerCompat = true;
|
|
};
|
|
|
|
virtualisation.lxd.enable = true;
|
|
virtualisation.lxd.recommendedSysctlSettings = true;
|
|
virtualisation.lxc.lxcfs.enable = true;
|
|
|
|
boot.kernel.sysctl = {
|
|
"kernel.perf_event_paranoid" = "0";
|
|
"kernel.kptr_restrict" = pkgs.lib.mkForce "0";
|
|
|
|
# IntelliJ
|
|
"fs.inotify.max_user_watches" = pkgs.lib.mkDefault 524288;
|
|
|
|
# undo lxd "recommendedSysctlSettings"
|
|
"kernel.dmesg_restrict" = pkgs.lib.mkForce 0;
|
|
};
|
|
|
|
# gapt: `ulimit -n` was 256
|
|
security.pam.loginLimits = [
|
|
{ domain = "*"; type = "-"; item = "nofile"; value = "4096"; }
|
|
];
|
|
|
|
fileSystems."/mnt/vaccaria" = {
|
|
device = "//vaccaria.htdf.gebner.org/export";
|
|
fsType = "cifs";
|
|
options = [ "noauto" "x-systemd.automount" "credentials=/etc/smbcredentials/vaccaria" "vers=1.0" ];
|
|
};
|
|
|
|
fileSystems."/mnt/aplysia" = {
|
|
device = "//aplysia.ams.gebner.org/export";
|
|
fsType = "cifs";
|
|
options = [ "noauto" "x-systemd.automount" "credentials=/etc/smbcredentials/aplysia" "vers=1.0" ];
|
|
};
|
|
|
|
fileSystems."/mnt/aruanus" = {
|
|
device = "//aruanus.htdf.gebner.org/export";
|
|
fsType = "cifs";
|
|
options = [ "noauto" "x-systemd.automount" "credentials=/etc/smbcredentials/aruanus" "vers=1.0" ];
|
|
};
|
|
|
|
users.extraUsers.gebner = {
|
|
isNormalUser = true;
|
|
extraGroups = [
|
|
"wheel"
|
|
"networkmanager"
|
|
"audio"
|
|
"transmission"
|
|
"lxd"
|
|
"libvirtd"
|
|
"vboxusers"
|
|
"wireshark"
|
|
];
|
|
# shell = "${pkgs.zsh}/bin/zsh";
|
|
shell = "/run/current-system/sw/bin/fish";
|
|
|
|
password = if config.virtualisation != null then "" else null;
|
|
};
|
|
|
|
i18n = {
|
|
defaultLocale = "en_US.UTF-8";
|
|
extraLocaleSettings = {
|
|
# LC_TIME = "en_GB.UTF-8";
|
|
LC_PAPER = "de_AT.UTF-8";
|
|
};
|
|
};
|
|
|
|
system.fsPackages = with pkgs; [
|
|
ntfs3g
|
|
exfat
|
|
];
|
|
|
|
}
|