helm/hosts/profiles/core/default.nix

52 lines
1.2 KiB
Nix
Raw Normal View History

2022-09-18 15:13:50 -07:00
{ self, config, lib, pkgs, ... }:
let inherit (lib) fileContents;
in
{
2022-12-06 08:01:17 -08:00
imports = [ ../../users/anish ];
2022-09-18 15:13:50 -07:00
fonts = {
2024-01-05 23:44:08 -08:00
packages = with pkgs; [ powerline-fonts dejavu_fonts ];
2022-09-18 15:13:50 -07:00
fontconfig.defaultFonts = {
monospace = [ "DejaVu Sans Mono for Powerline" ];
sansSerif = [ "DejaVu Sans" ];
};
};
nix = {
2022-12-04 21:07:27 -08:00
settings = {
sandbox = true;
2022-12-06 22:41:19 -08:00
trusted-users = [ "root" "@wheel" ];
2022-12-04 21:07:27 -08:00
allowed-users = [ "@wheel" ];
auto-optimise-store = true;
2022-12-05 23:09:27 -08:00
system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
2022-12-13 04:30:15 -08:00
experimental-features = [ "nix-command" "flakes" ];
2022-12-04 21:07:27 -08:00
};
2022-09-18 15:13:50 -07:00
gc.automatic = true;
optimise.automatic = true;
extraOptions = ''
min-free = 536870912
keep-outputs = true
keep-derivations = true
fallback = true
'';
};
environment.systemPackages = with pkgs; [
2024-03-15 23:25:49 -07:00
pinentry-gnome
2022-09-18 15:13:50 -07:00
cached-nix-shell
];
# For rage encryption, all hosts need a ssh key pair
services.openssh = {
enable = true;
openFirewall = lib.mkDefault false;
};
2023-08-12 18:57:16 -07:00
time.timeZone = "Canada/Pacific";
# programs.gnupg.agent.enable = true;
# programs.gnupg.agent.pinentryFlavor = "curses";
2022-09-18 15:13:50 -07:00
services.earlyoom.enable = true;
}