{ self, config, lib, pkgs, ... }: let inherit (lib) fileContents; in { imports = [ ../cachix ]; nix.systemFeatures = [ "nixos-test" "benchmark" "big-parallel" "kvm" ]; fonts = { fonts = with pkgs; [ powerline-fonts dejavu_fonts ]; fontconfig.defaultFonts = { monospace = [ "DejaVu Sans Mono for Powerline" ]; sansSerif = [ "DejaVu Sans" ]; }; }; nix = { autoOptimiseStore = true; gc.automatic = true; optimise.automatic = true; useSandbox = true; allowedUsers = [ "@wheel" ]; trustedUsers = [ "root" "@wheel" ]; extraOptions = '' min-free = 536870912 keep-outputs = true keep-derivations = true fallback = true ''; }; environment.systemPackages = with pkgs; [ pinentry_gnome cached-nix-shell ]; services.devmon.enable = true; # For rage encryption, all hosts need a ssh key pair services.openssh = { enable = true; openFirewall = lib.mkDefault false; }; programs.gnupg.agent.enable = true; #programs.gnupg.agent.pinentryFlavor = "curses"; services.earlyoom.enable = true; }