81 lines
1.8 KiB
Nix
81 lines
1.8 KiB
Nix
{
|
|
modulesPath,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
{
|
|
imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
|
|
|
|
config = {
|
|
time.timeZone = "Europe/Amsterdam";
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
|
|
#Provide a default hostname
|
|
networking.hostName = lib.mkDefault "base";
|
|
|
|
# Enable QEMU Guest for Proxmox
|
|
services.qemuGuest.enable = lib.mkDefault true;
|
|
|
|
# Use the boot drive for grub
|
|
boot.loader.grub.enable = lib.mkDefault true;
|
|
boot.loader.grub.devices = [ "/dev/sda" ];
|
|
|
|
boot.growPartition = lib.mkDefault true;
|
|
|
|
# Allow remote updates with flakes and non-root users
|
|
nix.settings.trusted-users = [
|
|
"root"
|
|
"@wheel"
|
|
];
|
|
nix.settings.experimental-features = [
|
|
"nix-command"
|
|
"flakes"
|
|
];
|
|
|
|
# Set up user for remote admin
|
|
users.users."maintenance" = {
|
|
isNormalUser = true;
|
|
group = "maintenance";
|
|
extraGroups = [ "wheel" ];
|
|
openssh.authorizedKeys.keyFiles = [ ../authorized_keys ];
|
|
};
|
|
|
|
users.groups."maintenance" = {};
|
|
|
|
# Enable mDNS for `hostname.local` addresses
|
|
services.avahi.enable = true;
|
|
services.avahi.nssmdns = true;
|
|
services.avahi.publish = {
|
|
enable = true;
|
|
addresses = true;
|
|
};
|
|
|
|
# Some sane packages we need on every system
|
|
environment.systemPackages = with pkgs; [
|
|
vim
|
|
git
|
|
];
|
|
|
|
# Don't ask for passwords
|
|
security.sudo.wheelNeedsPassword = false;
|
|
|
|
# Enable ssh
|
|
services.openssh = {
|
|
enable = true;
|
|
settings.PasswordAuthentication = false;
|
|
settings.KbdInteractiveAuthentication = false;
|
|
};
|
|
programs.ssh.startAgent = true;
|
|
|
|
# Default filesystem
|
|
fileSystems."/" = lib.mkDefault {
|
|
device = "/dev/disk/by-label/nixos";
|
|
autoResize = true;
|
|
fsType = "ext4";
|
|
};
|
|
|
|
system.stateVersion = lib.mkDefault "24.05";
|
|
};
|
|
}
|