88 lines
2.1 KiB
Nix
88 lines
2.1 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
let
|
|
impermanence = builtins.fetchTarball "https://github.com/nix-community/impermanence/archive/master.tar.gz";
|
|
in {
|
|
imports = [
|
|
"${impermanence}/nixos.nix"
|
|
<nixpkgs/nixos/modules/profiles/all-hardware.nix>
|
|
<nixpkgs/nixos/modules/profiles/base.nix>
|
|
#installer-only ./hardware-configuration.nix
|
|
];
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
zramSwap.enable = true;
|
|
services.logind.lidSwitch = "ignore";
|
|
|
|
security.sudo.wheelNeedsPassword = false;
|
|
|
|
networking.hostName = "install";
|
|
|
|
services.openssh.enable = true;
|
|
services.openssh.settings.PermitRootLogin = "yes";
|
|
|
|
users.mutableUsers = false;
|
|
users.users.root = {
|
|
# Password is "linux"
|
|
hashedPassword = lib.mkForce "$6$7IKExnDde920x.YH$ggegnnKJYdmg1Wt33fxuPpM.MmIaX32LXVyjL8ed7ohT385lKotFGzRpitncQ3pd9Lci1QCFGRn2tVJGxkFAm0";
|
|
};
|
|
|
|
services.avahi = {
|
|
enable = true;
|
|
ipv4 = true;
|
|
ipv6 = true;
|
|
nssmdns = true;
|
|
publish = { enable = true; domain = true; addresses = true; };
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
coreutils
|
|
curl
|
|
file
|
|
git
|
|
htop
|
|
lsof
|
|
nano
|
|
openssl
|
|
pciutils
|
|
pv
|
|
tmux
|
|
tree
|
|
unar
|
|
vim_configurable
|
|
wget
|
|
zip
|
|
];
|
|
|
|
environment.persistence."/nix/persist" = {
|
|
hideMounts = true;
|
|
directories = [
|
|
"/home"
|
|
];
|
|
};
|
|
environment.persistence."/nix/persist/system" = {
|
|
hideMounts = true;
|
|
directories = [
|
|
"/etc/nixos"
|
|
"/root/.ssh"
|
|
"/var/bento"
|
|
"/var/log"
|
|
"/var/lib/bluetooth"
|
|
"/var/lib/docker"
|
|
"/var/lib/flatpak"
|
|
"/var/lib/fprint"
|
|
"/var/lib/nixos"
|
|
"/var/lib/mysql"
|
|
"/etc/NetworkManager/system-connections"
|
|
];
|
|
files = [
|
|
{ file = "/etc/ssh/ssh_host_ed25519_key"; parentDirectory = { mode = "u=rwx,g=,o="; }; }
|
|
{ file = "/etc/ssh/ssh_host_ed25519_key.pub"; parentDirectory = { mode = "u=rwx,g=,o="; }; }
|
|
{ file = "/etc/ssh/ssh_host_rsa_key"; parentDirectory = { mode = "u=rwx,g=,o="; }; }
|
|
{ file = "/etc/ssh/ssh_host_rsa_key.pub"; parentDirectory = { mode = "u=rwx,g=,o="; }; }
|
|
];
|
|
};
|
|
|
|
system.stateVersion = "23.05"; # Did you read the comment?
|
|
}
|