108 lines
3.0 KiB
Nix
108 lines
3.0 KiB
Nix
{ config, lib, pkgs, ... }:
|
||
let
|
||
vars = import ./vars.nix;
|
||
enableDesktop = false;
|
||
in
|
||
{
|
||
imports =
|
||
[ # Include the results of the hardware scan.
|
||
./hardware-configuration.nix
|
||
./ifconfig.nix
|
||
./firewall.nix
|
||
./dns.nix
|
||
./kea.nix
|
||
./services.nix
|
||
];
|
||
# Secrix for secrets management
|
||
secrix.hostPubKey = vars.pubkey;
|
||
|
||
# Bootloader.
|
||
boot.loader.systemd-boot.enable = true;
|
||
boot.loader.efi.canTouchEfiVariables = false;
|
||
boot.kernelParams = [
|
||
"sysrq_always_enabled=1"
|
||
];
|
||
|
||
boot.loader.timeout = 2;
|
||
boot.loader.systemd-boot.configurationLimit = 5;
|
||
boot.kernelPackages = pkgs.linuxKernel.packages.linux_6_12;
|
||
boot.growPartition = true;
|
||
|
||
networking.hostName = "grouter";
|
||
|
||
# Enable the X11 windowing system.
|
||
# You can disable this if you're only using the Wayland session.
|
||
services.xserver.enable = false;
|
||
|
||
# Enable the KDE Plasma Desktop Environment.
|
||
# Useful for debugging with wireshark.
|
||
hardware.graphics.enable = true;
|
||
services.displayManager.sddm.enable = enableDesktop;
|
||
services.displayManager.sddm.wayland.enable = enableDesktop;
|
||
services.desktopManager.plasma6.enable = enableDesktop;
|
||
# No need for audio in VM
|
||
services.pipewire.enable = false;
|
||
|
||
# VM services
|
||
services.qemuGuest.enable = true;
|
||
services.spice-vdagentd.enable = true;
|
||
services.openssh.enable = true;
|
||
services.openssh.settings.PasswordAuthentication = false;
|
||
services.openssh.settings.KbdInteractiveAuthentication = false;
|
||
|
||
security.sudo.wheelNeedsPassword = false;
|
||
|
||
users.groups = {
|
||
cazzzer = {
|
||
gid = 1000;
|
||
};
|
||
};
|
||
users.users.cazzzer = {
|
||
password = "";
|
||
openssh.authorizedKeys.keys = [
|
||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPWgEzbEjbbu96MVQzkiuCrw+UGYAXN4sRe2zM6FVopq cazzzer@Yura-PC"
|
||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIApFeLVi3BOquL0Rt+gQK2CutNHaBDQ0m4PcGWf9Bc43 cazzzer@Yura-TPX13"
|
||
];
|
||
isNormalUser = true;
|
||
description = "Yura";
|
||
uid = 1000;
|
||
group = "cazzzer";
|
||
extraGroups = [ "wheel" "wireshark" ];
|
||
};
|
||
|
||
programs.firefox.enable = true;
|
||
programs.fish.enable = true;
|
||
programs.git.enable = true;
|
||
programs.neovim.enable = true;
|
||
programs.bat.enable = true;
|
||
programs.htop.enable = true;
|
||
programs.wireshark.enable = true;
|
||
programs.wireshark.package = pkgs.wireshark; # wireshark-cli by default
|
||
|
||
environment.systemPackages = with pkgs; [
|
||
dust
|
||
eza
|
||
fastfetch
|
||
fd
|
||
kdePackages.kate
|
||
ldns
|
||
lsof
|
||
micro
|
||
mpv
|
||
ripgrep
|
||
rustscan
|
||
starship
|
||
tealdeer
|
||
waypipe
|
||
whois
|
||
];
|
||
|
||
# This value determines the NixOS release from which the default
|
||
# settings for stateful data, like file locations and database versions
|
||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||
# this value at the release version of the first install of this system.
|
||
# Before changing this value read the documentation for this option
|
||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||
system.stateVersion = "24.11"; # Did you read the comment?
|
||
}
|