blob: 6a10a84e5293eafa042c835f4c30071e50bf8e11 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
{ config, pkgs, lib, ... }:
{
imports =
[
./packages/vim.nix
./users/Rory.nix
./extra-substituters.nix
];
boot = {
kernelParams = [
"memory_hotplug.memmap_on_memory=1"
"memhp_default_state=online"
"net.core.default_qdisc=fq"
"net.ipv4.tcp_congestion_control=bbr"
];
}
networking = {
hostName = lib.mkDefault "Rory-nix-base";
firewall = {
enable = false;
# allowedTCPPorts = [ ... ];
# allowedUDPPorts = [ ... ];
};
};
i18n.defaultLocale = "en_US.UTF-8";
services = {
openssh = {
enable = true;
#allow more logins in cases where i have many ssh keys on a system
extraConfig = ''
MaxAuthTries 32
'';
};
};
systemd = {
sleep.extraConfig = ''
AllowSuspend=no
AllowHibernation=no
'';
};
environment.systemPackages = with pkgs; [
wget
neofetch
lnav
pciutils
git
lsd
duf
htop
btop
duf
kitty.terminfo
tmux
jq
yq
pv
dig
cloud-utils
];
systemd.coredump.extraConfig = lib.mkDefault ''
Storage=none
'';
nix = {
settings = {
experimental-features = [ "nix-command" "flakes" ];
auto-optimise-store = true;
};
};
nixpkgs = {
config.allowUnfree = true;
};
security = {
polkit.enable = true;
sudo.wheelNeedsPassword = false;
};
system.stateVersion = "22.11"; # DO NOT EDIT!
}
|
