This commit is contained in:
Anish Lakhwara 2022-12-07 16:41:19 +10:00
parent 171e53e898
commit 38ded2454c
2 changed files with 48 additions and 48 deletions

View file

@ -1,52 +1,52 @@
{ self, config, lib, pkgs, ... }:
let inherit (lib) fileContents;
in
{ {
description = "Your new nix config"; imports = [ ../../users/anish ];
inputs = {
# Nixpkgs
nixpkgs.url = "github:nixos/nixpkgs/nixos-22.11";
unstable.url = "github:nixos/nixpkgs/nixos-unstable";
# Home manager fonts = {
home-manager.url = "github:nix-community/home-manager"; fonts = with pkgs; [ powerline-fonts dejavu_fonts ];
home-manager.inputs.nixpkgs.follows = "nixpkgs"; fontconfig.defaultFonts = {
hardware.url = "github:nixos/nixos-hardware"; monospace = [ "DejaVu Sans Mono for Powerline" ];
sansSerif = [ "DejaVu Sans" ];
# Tools
agenix.url = "github:ryantm/agenix";
agenix.inputs.nixpkgs.follows = "nixpkgs";
deploy-rs.url = "github:serokell/deploy-rs";
deploy-rs.inputs.nixpkgs.follows = "nixpkgs";
# Packages
poonam.url = "git+ssh://gitea@git.sealight.xyz/aynish/kitaab?ref=main";
basant.url = "git+ssh://gitea@git.sealight.xyz/aynish/basant?ref=main";
basant.inputs.nixpkgs.follows = "nixpkgs";
basant.inputs.poonam.follows = "poonam";
grasp.url = "git+ssh://gitea@git.sealight.xyz/aynish/grasp.git?ref=main";
grasp.inputs.nixpkgs.follows = "nixpkgs";
# Others
nur.url = "github:nix-community/NUR";
rust-overlay = {
url = "github:oxalica/rust-overlay";
inputs.nixpkgs.follows = "nixpkgs";
}; };
eww = {
url = "github:elkowar/eww";
inputs.nixpkgs.follows = "nixpkgs";
inputs.rust-overlay.follows = "rust-overlay";
};
tidalcycles.url = "github:mitchmindtree/tidalcycles.nix";
tidalcycles.inputs.nixpkgs.follows = "unstable";
# TODO hundred rabbits software
# TODO needs secrets
# dhyan.url = "git+ssh://gitea@git.sealight.xyz/aynish/dhyan?ref=main";
# dhyan.inputs.nixpkgs.follows = "nixpkgs";
# TODO needs secrets
# muneem.url = "git+ssh://gitea@git.sealight.xyz/aynish/muneem?ref=main";
# muneem.inputs.nixpkgs.follows = "nixpkgs";
}; };
outputs = nix = {
settings = {
sandbox = true;
trusted-users = [ "root" "@wheel" ];
allowed-users = [ "@wheel" ];
auto-optimise-store = true;
system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
};
gc.automatic = true;
optimise.automatic = true;
extraOptions = ''
min-free = 536870912
keep-outputs = true
keep-derivations = true
fallback = true
'';
};
environment.systemPackages = with pkgs; [
pinentry_gnome
cached-nix-shell
];
# For rage encryption, all hosts need a ssh key pair
services.openssh = {
enable = true;
openFirewall = lib.mkDefault false;
};
# programs.gnupg.agent.enable = true;
# programs.gnupg.agent.pinentryFlavor = "curses";
services.earlyoom.enable = true;
}
{ self { self
, nixpkgs , nixpkgs
, unstable , unstable
@ -234,28 +234,28 @@
box = { box = {
hostname = "mossnet.lan"; hostname = "mossnet.lan";
profiles.system = { profiles.system = {
user = "anish"; user = "root";
path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.box; path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.box;
}; };
}; };
helix = { helix = {
hostname = "sealight.xyz"; hostname = "sealight.xyz";
profiles.system = { profiles.system = {
user = "anish"; user = "root";
path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.helix; path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.helix;
}; };
}; };
lituus = { lituus = {
hostname = "git.sealight.xyz"; hostname = "git.sealight.xyz";
profiles.system = { profiles.system = {
user = "anish"; user = "root";
path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.lituus; path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.lituus;
}; };
}; };
cube = { cube = {
hostname = "lakhwara.com"; hostname = "lakhwara.com";
profiles.system = { profiles.system = {
user = "anish"; user = "root";
path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.cube; path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.cube;
}; };
}; };

View file

@ -16,7 +16,7 @@ in
nix = { nix = {
settings = { settings = {
sandbox = true; sandbox = true;
trusted-users = [ "anish" "root" "@wheel" ]; trusted-users = [ "root" "@wheel" ];
allowed-users = [ "@wheel" ]; allowed-users = [ "@wheel" ];
auto-optimise-store = true; auto-optimise-store = true;
system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ]; system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];