summary refs log tree commit diff
path: root/modules/base.nix
blob: 268ddda1d1753993875b44f614a873d2cd1f0923 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
{ config, pkgs, lib, ... }:

{
  imports =
    [
      ./monitoring.nix
      ./users/Rory.nix
      ./users/chris.nix
    ];
  boot = {
    kernelPackages = pkgs.linuxPackages_latest;
    kernelParams = [ "memory_hotplug.memmap_on_memory=1" "memhp_default_state=online" ];
    loader = {
      grub = {
        enable = true;
        version = 2;
        devices = [ "/dev/sda" ]; # nodev for EFI only
        # EFI
        efiSupport = false;
        efiInstallAsRemovable = false;
      };
      timeout = 1;
    };
  };

  networking = {
    hostName = lib.mkDefault "Spacebar-nix-base-server";
    firewall = {
      enable = false;
      # allowedTCPPorts = [ ... ];
      # allowedUDPPorts = [ ... ];
    };
    
    networkmanager.enable = false;
    wireless.enable = false;
    enableIPv6 = false;

    useDHCP = false;
    nameservers = [ "1.1.1.1" ];
    defaultGateway = "192.168.1.1";
  };

  services = {
    openssh = {
      enable = true;
    };	
  };


  environment.systemPackages = with pkgs; [
    wget
    neofetch
    lnav
    git
    lsd
    htop
    btop
    duf
    kitty.terminfo
    neovim
  ];

  systemd.coredump.extraConfig = lib.mkDefault ''
    Storage=none
  '';

  documentation.nixos.enable = false;
  hardware.pulseaudio.enable = false;
  i18n.defaultLocale = "en_US.UTF-8";
  nix.settings.experimental-features = [ "nix-command" "flakes" ];
  nixpkgs.config.allowUnfree = true;
  security.sudo.wheelNeedsPassword = false;
  security.polkit.enable = true;
  sound.enable = false;
  system.stateVersion = "22.11"; # DO NOT EDIT!
}