phew

flake.nix

@@ -1,52 +1,52 @@
+{ self, config, lib, pkgs, ... }:
+let inherit (lib) fileContents;
+in
 {
-  description = "Your new nix config";
+  imports = [ ../../users/anish ];
 
-  inputs = {
-    # Nixpkgs
-    nixpkgs.url = "github:nixos/nixpkgs/nixos-22.11";
-    unstable.url = "github:nixos/nixpkgs/nixos-unstable";
 
-    # Home manager
+  fonts = {
-    home-manager.url = "github:nix-community/home-manager";
+    fonts = with pkgs; [ powerline-fonts dejavu_fonts ];
-    home-manager.inputs.nixpkgs.follows = "nixpkgs";
+    fontconfig.defaultFonts = {
-    hardware.url = "github:nixos/nixos-hardware";
+      monospace = [ "DejaVu Sans Mono for Powerline" ];
-
+      sansSerif = [ "DejaVu Sans" ];
-    # Tools
-    agenix.url = "github:ryantm/agenix";
-    agenix.inputs.nixpkgs.follows = "nixpkgs";
-    deploy-rs.url = "github:serokell/deploy-rs";
-    deploy-rs.inputs.nixpkgs.follows = "nixpkgs";
-
-    # Packages
-    poonam.url = "git+ssh://gitea@git.sealight.xyz/aynish/kitaab?ref=main";
-    basant.url = "git+ssh://gitea@git.sealight.xyz/aynish/basant?ref=main";
-    basant.inputs.nixpkgs.follows = "nixpkgs";
-    basant.inputs.poonam.follows = "poonam";
-    grasp.url = "git+ssh://gitea@git.sealight.xyz/aynish/grasp.git?ref=main";
-    grasp.inputs.nixpkgs.follows = "nixpkgs";
-    # Others
-    nur.url = "github:nix-community/NUR";
-    rust-overlay = {
-      url = "github:oxalica/rust-overlay";
-      inputs.nixpkgs.follows = "nixpkgs";
     };
-    eww = {
-      url = "github:elkowar/eww";
-      inputs.nixpkgs.follows = "nixpkgs";
-      inputs.rust-overlay.follows = "rust-overlay";
-    };
-    tidalcycles.url = "github:mitchmindtree/tidalcycles.nix";
-    tidalcycles.inputs.nixpkgs.follows = "unstable";
-    # TODO hundred rabbits software
-    # TODO needs secrets
-    # dhyan.url = "git+ssh://gitea@git.sealight.xyz/aynish/dhyan?ref=main";
-    # dhyan.inputs.nixpkgs.follows = "nixpkgs";
-    # TODO needs secrets
-    # muneem.url = "git+ssh://gitea@git.sealight.xyz/aynish/muneem?ref=main";
-    # muneem.inputs.nixpkgs.follows = "nixpkgs";
   };
 
-  outputs =
+  nix = {
+    settings = {
+      sandbox = true;
+      trusted-users = [ "root" "@wheel" ];
+      allowed-users = [ "@wheel" ];
+      auto-optimise-store = true;
+      system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
+    };
+    gc.automatic = true;
+    optimise.automatic = true;
+    extraOptions = ''
+      min-free = 536870912
+      keep-outputs = true
+      keep-derivations = true
+      fallback = true
+    '';
+  };
+
+  environment.systemPackages = with pkgs; [
+    pinentry_gnome
+    cached-nix-shell
+  ];
+
+  # For rage encryption, all hosts need a ssh key pair
+  services.openssh = {
+    enable = true;
+    openFirewall = lib.mkDefault false;
+  };
+
+  # programs.gnupg.agent.enable = true;
+  # programs.gnupg.agent.pinentryFlavor = "curses";
+
+  services.earlyoom.enable = true;
+}
     { self
     , nixpkgs
     , unstable
@@ -234,28 +234,28 @@
         box = {
           hostname = "mossnet.lan";
           profiles.system = {
-            user = "anish";
+            user = "root";
             path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.box;
           };
         };
         helix = {
           hostname = "sealight.xyz";
           profiles.system = {
-            user = "anish";
+            user = "root";
             path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.helix;
           };
         };
         lituus = {
           hostname = "git.sealight.xyz";
           profiles.system = {
-            user = "anish";
+            user = "root";
             path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.lituus;
           };
         };
         cube = {
           hostname = "lakhwara.com";
           profiles.system = {
-            user = "anish";
+            user = "root";
             path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.cube;
           };
         };

hosts/profiles/core/default.nix

@@ -16,7 +16,7 @@ in
   nix = {
     settings = {
       sandbox = true;
-      trusted-users = [ "anish" "root" "@wheel" ];
+      trusted-users = [ "root" "@wheel" ];
       allowed-users = [ "@wheel" ];
       auto-optimise-store = true;
       system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];