3face7eddd
This changes how the templates use nixpkgs. Before, we instantiated nixpkgs in the flake and passd it directly to the configs; this was good for consistency, but silently ignored `nixpkgs.*` options, generating confusion among users. We now use modules to configure nixpkgs. This should help avoid cases such as: https://discourse.nixos.org/t/allowunfree-doesnt-work-with-flake-managed-system/21798/17 The drawback is that we can no longer test overlayed packages like so: `nix build .#foo`, you can do it like so instead: `nix build .#nixosConfigurations.your-system.pkgs.foo`. Personally, I've been avoiding override packages globally in my own config.
78 lines
2.8 KiB
Nix
78 lines
2.8 KiB
Nix
# This is your system's configuration file.
|
|
# Use this to configure your system environment (it replaces /etc/nixos/configuration.nix)
|
|
|
|
{ inputs, lib, config, pkgs, ... }: {
|
|
|
|
imports = [
|
|
# If you want to use modules from other flakes (such as nixos-hardware), use something like:
|
|
# inputs.hardware.nixosModules.common-cpu-amd
|
|
# inputs.hardware.nixosModules.common-ssd
|
|
|
|
# It's strongly recommended you take a look at
|
|
# https://github.com/nixos/nixos-hardware
|
|
# and import modules relevant to your hardware.
|
|
|
|
# Import your generated (nixos-generate-config) hardware configuration
|
|
./hardware-configuration.nix
|
|
|
|
# You can also split up your configuration and import pieces of it here.
|
|
];
|
|
|
|
nix = {
|
|
# This will add each flake input as a registry
|
|
# To make nix3 commands consistent with your flake
|
|
registry = lib.mapAttrs (_: value: { flake = value; }) inputs;
|
|
|
|
# This will additionally add your inputs to the system's legacy channels
|
|
# Making legacy nix commands consistent as well, awesome!
|
|
nixPath = lib.mapAttrsToList (key: value: "${key}=${value.to.path}") config.nix.registry;
|
|
};
|
|
|
|
nix = {
|
|
settings = {
|
|
# Enable flakes and new 'nix' command
|
|
experimental-features = "nix-command flakes";
|
|
# Deduplicate and optimize nix store
|
|
auto-optimise-store = true;
|
|
};
|
|
};
|
|
|
|
# FIXME: Add the rest of your current configuration
|
|
|
|
# TODO: Set your hostname
|
|
networking.hostName = "your-hostname";
|
|
|
|
# TODO: This is just an example, be sure to use whatever bootloader you prefer
|
|
boot.loader.systemd-boot.enable = true;
|
|
|
|
# TODO: Configure your system-wide user settings (groups, etc), add more users as needed.
|
|
users.users = {
|
|
# FIXME: Replace with your username
|
|
your-username = {
|
|
# TODO: You can set an initial password for your user.
|
|
# If you do, you can skip setting a root password by passing '--no-root-passwd' to nixos-install.
|
|
# Be sure to change it (using passwd) after rebooting!
|
|
initialPassword = "correcthorsebatterystaple";
|
|
isNormalUser = true;
|
|
openssh.authorizedKeys.keys = [
|
|
# TODO: Add your SSH public key(s) here, if you plan on using SSH to connect
|
|
];
|
|
# TODO: Be sure to add any other groups you need (such as networkmanager, audio, docker, etc)
|
|
extraGroups = [ "wheel" ];
|
|
};
|
|
};
|
|
|
|
# This sets up a SSH server. Very important if you're setting up a headless system.
|
|
# Feel free to remove if you don't need it.
|
|
services.openssh = {
|
|
enable = true;
|
|
# Forbid root login through SSH.
|
|
permitRootLogin = "no";
|
|
# Use keys only. Remove if you want to SSH using password (not recommended)
|
|
passwordAuthentication = false;
|
|
};
|
|
|
|
# https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
|
|
system.stateVersion = "22.05";
|
|
}
|