diff --git a/flake.nix b/flake.nix index 56b8d7eb..ce28dfaa 100644 --- a/flake.nix +++ b/flake.nix @@ -116,10 +116,10 @@ users = digga.lib.rakeLeaves ./users; }; suites = with profiles; rec { - base = [ core users.root users.anish ]; # TODO make anish non gui - sealight = [ base ]; # matrix rsshub backup wireguard website + base = [ core users.root users.anish ]; + sealight = [ base ]; # matrix rsshub backup wireguard mossnet = [ base ]; # shaarli wallabag nextcloud taskwarrior headphones - cube = [ base site ]; + cube = [ base site server ]; graphical = [ base bluetooth music sync wireguard wifi desktop ]; curve = [ graphical secrets ]; work = [ base ]; diff --git a/hosts/cube/configuration.nix b/hosts/cube/configuration.nix index ef9a1101..de613218 100644 --- a/hosts/cube/configuration.nix +++ b/hosts/cube/configuration.nix @@ -2,7 +2,8 @@ { imports = - [ # Include the results of the hardware scan. + [ + # Include the results of the hardware scan. ./hardware-configuration.nix ]; @@ -13,39 +14,15 @@ networking.hostName = "cube"; # Define your hostname. time.timeZone = "Australia/Brisbane"; - # Use flakes - nix = { - trustedUsers = [ "root" "@wheel" ]; - package = pkgs.nixFlakes; # or versioned attributes like nix_2_7 - extraOptions = '' - experimental-features = nix-command flakes - ''; - }; - networking.useDHCP = false; networking.interfaces.ens3.useDHCP = true; - - users.users.anish = { - isNormalUser = true; - extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user. - initialPassword = "SuperDuper"; - openssh.authorizedKeys.keys = [ "ssh-rsa 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 anish@curve" ]; - }; + i18n.defaultLocale = "en_US.UTF-8"; environment.systemPackages = with pkgs; [ - vim - gitAndTools.gitFull + vim + gitAndTools.gitFull ]; - # services."anish.lakhwara.com".enable = true; - # security.acme.email = "anish+acme@lakhwara.com"; - # security.acme.acceptTerms = true; - - - # Enable the OpenSSH daemon. - services.openssh.enable = true; - security.sudo.wheelNeedsPassword = false; - # This value determines the NixOS release from which the default # settings for stateful data, like file locations and database versions # on your system were taken. It‘s perfectly fine and recommended to leave diff --git a/hosts/curve/default.nix b/hosts/curve/default.nix index ebf379c8..9e2066bc 100644 --- a/hosts/curve/default.nix +++ b/hosts/curve/default.nix @@ -2,7 +2,6 @@ { imports = [ ./configuration.nix - profiles.users.anish profiles.mossnet-hosts ] ++ suites.curve; diff --git a/profiles/server/default.nix b/profiles/server/default.nix new file mode 100644 index 00000000..add4599a --- /dev/null +++ b/profiles/server/default.nix @@ -0,0 +1,7 @@ +{ config, ... }: +{ + # Enable the OpenSSH daemon. + services.openssh.enable = true; + security.sudo.wheelNeedsPassword = false; + +}