diff --git a/flake.nix b/flake.nix index 93668cc2..9d744754 100644 --- a/flake.nix +++ b/flake.nix @@ -1,52 +1,52 @@ +{ self, config, lib, pkgs, ... }: +let inherit (lib) fileContents; +in { - description = "Your new nix config"; + imports = [ ../../users/anish ]; - inputs = { - # Nixpkgs - nixpkgs.url = "github:nixos/nixpkgs/nixos-22.11"; - unstable.url = "github:nixos/nixpkgs/nixos-unstable"; - # Home manager - home-manager.url = "github:nix-community/home-manager"; - home-manager.inputs.nixpkgs.follows = "nixpkgs"; - hardware.url = "github:nixos/nixos-hardware"; - - # Tools - agenix.url = "github:ryantm/agenix"; - agenix.inputs.nixpkgs.follows = "nixpkgs"; - deploy-rs.url = "github:serokell/deploy-rs"; - deploy-rs.inputs.nixpkgs.follows = "nixpkgs"; - - # Packages - poonam.url = "git+ssh://gitea@git.sealight.xyz/aynish/kitaab?ref=main"; - basant.url = "git+ssh://gitea@git.sealight.xyz/aynish/basant?ref=main"; - basant.inputs.nixpkgs.follows = "nixpkgs"; - basant.inputs.poonam.follows = "poonam"; - grasp.url = "git+ssh://gitea@git.sealight.xyz/aynish/grasp.git?ref=main"; - grasp.inputs.nixpkgs.follows = "nixpkgs"; - # Others - nur.url = "github:nix-community/NUR"; - rust-overlay = { - url = "github:oxalica/rust-overlay"; - inputs.nixpkgs.follows = "nixpkgs"; + fonts = { + fonts = with pkgs; [ powerline-fonts dejavu_fonts ]; + fontconfig.defaultFonts = { + monospace = [ "DejaVu Sans Mono for Powerline" ]; + sansSerif = [ "DejaVu Sans" ]; }; - eww = { - url = "github:elkowar/eww"; - inputs.nixpkgs.follows = "nixpkgs"; - inputs.rust-overlay.follows = "rust-overlay"; - }; - tidalcycles.url = "github:mitchmindtree/tidalcycles.nix"; - tidalcycles.inputs.nixpkgs.follows = "unstable"; - # TODO hundred rabbits software - # TODO needs secrets - # dhyan.url = "git+ssh://gitea@git.sealight.xyz/aynish/dhyan?ref=main"; - # dhyan.inputs.nixpkgs.follows = "nixpkgs"; - # TODO needs secrets - # muneem.url = "git+ssh://gitea@git.sealight.xyz/aynish/muneem?ref=main"; - # muneem.inputs.nixpkgs.follows = "nixpkgs"; }; - outputs = + nix = { + settings = { + sandbox = true; + trusted-users = [ "root" "@wheel" ]; + allowed-users = [ "@wheel" ]; + auto-optimise-store = true; + system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ]; + }; + gc.automatic = true; + optimise.automatic = true; + extraOptions = '' + min-free = 536870912 + keep-outputs = true + keep-derivations = true + fallback = true + ''; + }; + + environment.systemPackages = with pkgs; [ + pinentry_gnome + cached-nix-shell + ]; + + # For rage encryption, all hosts need a ssh key pair + services.openssh = { + enable = true; + openFirewall = lib.mkDefault false; + }; + + # programs.gnupg.agent.enable = true; + # programs.gnupg.agent.pinentryFlavor = "curses"; + + services.earlyoom.enable = true; +} { self , nixpkgs , unstable @@ -234,28 +234,28 @@ box = { hostname = "mossnet.lan"; profiles.system = { - user = "anish"; + user = "root"; path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.box; }; }; helix = { hostname = "sealight.xyz"; profiles.system = { - user = "anish"; + user = "root"; path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.helix; }; }; lituus = { hostname = "git.sealight.xyz"; profiles.system = { - user = "anish"; + user = "root"; path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.lituus; }; }; cube = { hostname = "lakhwara.com"; profiles.system = { - user = "anish"; + user = "root"; path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.cube; }; }; diff --git a/hosts/profiles/core/default.nix b/hosts/profiles/core/default.nix index cf393f2c..d9ce3acf 100644 --- a/hosts/profiles/core/default.nix +++ b/hosts/profiles/core/default.nix @@ -16,7 +16,7 @@ in nix = { settings = { sandbox = true; - trusted-users = [ "anish" "root" "@wheel" ]; + trusted-users = [ "root" "@wheel" ]; allowed-users = [ "@wheel" ]; auto-optimise-store = true; system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];