nyancat/flake
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

dust: use immutable /etc

Browse source
This commit is contained in:
Guanran Wang 2024-10-20 14:45:52 +08:00
parent c09ca82a99
commit 52c3fa4772
Signed by: nyancat
GPG key ID: 91F97D9ED12639CF
2 changed files with 20 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
home/default.nix
View file

@ -18,11 +18,12 @@
programs = { programs = {
jq.enable = true; jq.enable = true;
man.generateCaches = false;
mangohud.enable = true;
obs-studio.enable = true; obs-studio.enable = true;
ripgrep.enable = true; ripgrep.enable = true;
skim.enable = true; skim.enable = true;
zoxide.enable = true; zoxide.enable = true;
mangohud.enable = true;
}; };
services = { services = {

22
hosts/dust/default.nix
View file

@ -44,6 +44,8 @@
} }
); );
boot.kernelPackages = lib.mkForce pkgs.linuxPackages_testing;
nix.extraOptions = "!include ${config.sops.secrets.nix-access-tokens.path}"; nix.extraOptions = "!include ${config.sops.secrets.nix-access-tokens.path}";
networking.hostName = "dust"; networking.hostName = "dust";
@ -51,11 +53,23 @@
system.stateVersion = "24.05"; system.stateVersion = "24.05";
# TODO: move to 'core' profile # TODO: move to 'core' profile
system.etc.overlay.enable = true;
services.userborn.enable = true; services.userborn.enable = true;
system.etc.overlay.enable = true;
# TODO: this is currently broken system.etc.overlay.mutable = false;
# system.etc.overlay.mutable = false; # HACK: for impermanence
environment.etc =
lib.genAttrs
[
"ssh/ssh_host_rsa_key"
"ssh/ssh_host_rsa_key.pub"
"ssh/ssh_host_ed25519_key"
"ssh/ssh_host_ed25519_key.pub"
"secureboot/placeholder"
]
(_n: {
source = pkgs.emptyFile;
mode = "0644";
});
users.users."guanranwang" = { users.users."guanranwang" = {
isNormalUser = true; isNormalUser = true;