flake/nixos/profiles/core/default.nix

85 lines
1.6 KiB
Nix
Raw Normal View History

{
lib,
2023-12-10 15:56:40 +00:00
inputs,
2023-12-25 14:27:42 +00:00
pkgs,
...
}:
{
imports =
[
2024-07-09 23:12:02 +00:00
./hardening.nix
./networking.nix
2024-07-09 23:18:57 +00:00
./nix.nix
2024-08-01 22:17:30 +00:00
./zram.nix
]
++ (with inputs; [
disko.nixosModules.disko
home-manager.nixosModules.home-manager
impermanence.nixosModules.impermanence
lanzaboote.nixosModules.lanzaboote
self.nixosModules.default
sops-nix.nixosModules.sops
]);
2023-12-10 15:56:40 +00:00
2024-02-06 10:05:14 +00:00
nixpkgs.overlays = [
inputs.self.overlays.patches
2024-02-06 10:05:14 +00:00
];
2024-08-30 20:14:38 +00:00
boot.kernelPackages = pkgs.linuxPackages_latest;
2023-11-20 12:21:34 +00:00
2023-12-25 14:27:42 +00:00
environment.systemPackages = with pkgs; [
unzip
tree
file
htop
lsof
ltrace
strace
2023-12-25 14:27:42 +00:00
dnsutils
pciutils
usbutils
];
2024-08-01 22:17:30 +00:00
users.mutableUsers = false;
boot.initrd.systemd.enable = true;
environment.stub-ld.enable = false;
programs.command-not-found.enable = false;
programs.nano.enable = false;
programs.vim = {
enable = true;
defaultEditor = true;
};
# https://archlinux.org/news/making-dbus-broker-our-default-d-bus-daemon/
2024-08-30 20:14:38 +00:00
services.dbus.implementation = "broker";
2024-08-01 22:17:30 +00:00
security.sudo.execWheelOnly = true;
security.sudo.extraConfig = ''
Defaults lecture = never
'';
2024-07-09 23:18:57 +00:00
documentation = {
doc.enable = false;
info.enable = false;
nixos.enable = false;
};
# https://github.com/NixOS/nixpkgs/pull/308801
# nixos/switch-to-configuration: add new implementation
system.switch = {
enable = false;
enableNg = true;
};
2024-01-17 04:47:27 +00:00
### sops-nix
sops = {
2024-07-09 23:12:02 +00:00
defaultSopsFile = ../../../secrets.yaml;
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
gnupg.sshKeyPaths = [ ];
2024-07-09 23:18:57 +00:00
secrets."hashed-passwd".neededForUsers = true;
2024-01-17 04:47:27 +00:00
};
2023-09-19 00:17:43 +00:00
}