50 lines
1.1 KiB
Nix
50 lines
1.1 KiB
Nix
{ self, config, lib, pkgs, ... }:
|
|
let inherit (lib) fileContents;
|
|
in
|
|
{
|
|
imports = [ ../cachix ];
|
|
|
|
nix.systemFeatures = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
|
|
|
|
fonts = {
|
|
fonts = with pkgs; [ powerline-fonts dejavu_fonts ];
|
|
fontconfig.defaultFonts = {
|
|
monospace = [ "DejaVu Sans Mono for Powerline" ];
|
|
sansSerif = [ "DejaVu Sans" ];
|
|
};
|
|
};
|
|
|
|
nix = {
|
|
autoOptimiseStore = true;
|
|
gc.automatic = true;
|
|
optimise.automatic = true;
|
|
useSandbox = true;
|
|
allowedUsers = [ "@wheel" ];
|
|
trustedUsers = [ "root" "@wheel" ];
|
|
extraOptions = ''
|
|
min-free = 536870912
|
|
keep-outputs = true
|
|
keep-derivations = true
|
|
fallback = true
|
|
'';
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
pinentry_gnome
|
|
cached-nix-shell
|
|
];
|
|
|
|
services.devmon.enable = true;
|
|
|
|
# For rage encryption, all hosts need a ssh key pair
|
|
services.openssh = {
|
|
enable = true;
|
|
openFirewall = lib.mkDefault false;
|
|
};
|
|
|
|
programs.gnupg.agent.enable = true;
|
|
#programs.gnupg.agent.pinentryFlavor = "curses";
|
|
|
|
services.earlyoom.enable = true;
|
|
}
|