add saner pre-installed programs
This commit is contained in:
parent
d7a565f2ce
commit
74bcda2c80
1 changed files with 38 additions and 20 deletions
|
@ -50,34 +50,52 @@
|
||||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINUZp4BCxf7uLa1QWonx/Crf8tYZ5MKIZ+EuaBa82LrV user@user-laptop"
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINUZp4BCxf7uLa1QWonx/Crf8tYZ5MKIZ+EuaBa82LrV user@user-laptop"
|
||||||
];
|
];
|
||||||
|
|
||||||
programs.ssh = {
|
programs = {
|
||||||
knownHosts = {
|
ssh = {
|
||||||
dmz = {
|
knownHosts = {
|
||||||
hostNames = [ "*.dmz" ];
|
dmz = {
|
||||||
publicKey =
|
hostNames = [ "*.dmz" ];
|
||||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAX2IhgHNxC6JTvLu9cej+iWuG+uJFMXn4AiRro9533x";
|
publicKey =
|
||||||
certAuthority = true;
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAX2IhgHNxC6JTvLu9cej+iWuG+uJFMXn4AiRro9533x";
|
||||||
|
certAuthority = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
hypervisors = {
|
||||||
|
hostNames = [ "*.hyp" ];
|
||||||
|
publicKey =
|
||||||
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFzRkH3d/KVJQouswY/DMpenWbDFVOnI3Vut0xR0e1tb";
|
||||||
|
certAuthority = true;
|
||||||
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
hypervisors = {
|
extraConfig = ''
|
||||||
hostNames = [ "*.hyp" ];
|
CertificateFile ${
|
||||||
publicKey =
|
builtins.toFile "user_ed25519-cert.pub" machine.user-cert
|
||||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFzRkH3d/KVJQouswY/DMpenWbDFVOnI3Vut0xR0e1tb";
|
}
|
||||||
certAuthority = true;
|
HostKey ${config.age.secrets.user_ed25519.path}
|
||||||
};
|
'';
|
||||||
};
|
};
|
||||||
|
|
||||||
extraConfig = ''
|
neovim = {
|
||||||
CertificateFile ${
|
enable = true;
|
||||||
builtins.toFile "user_ed25519-cert.pub" machine.user-cert
|
vimAlias = true;
|
||||||
}
|
viAlias = true;
|
||||||
HostKey ${config.age.secrets.user_ed25519.path}
|
};
|
||||||
'';
|
|
||||||
};
|
};
|
||||||
|
|
||||||
nixpkgs.config.allowUnfree = true;
|
nixpkgs.config.allowUnfree = true;
|
||||||
|
|
||||||
environment.systemPackages = with pkgs; [ vim neofetch python3 ];
|
environment.systemPackages = with pkgs; [
|
||||||
|
neofetch
|
||||||
|
wget
|
||||||
|
git
|
||||||
|
btop
|
||||||
|
htop
|
||||||
|
ripgrep
|
||||||
|
dig
|
||||||
|
tree
|
||||||
|
file
|
||||||
|
];
|
||||||
|
|
||||||
networking.firewall.enable = false;
|
networking.firewall.enable = false;
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue