109 lines
2.5 KiB
Nix
109 lines
2.5 KiB
Nix
{ pkgs, config, ... }:
|
|
|
|
let
|
|
stateVersion = "23.05";
|
|
home-manager = builtins.fetchTarball {url = "https://github.com/nix-community/home-manager/archive/release-${stateVersion}.tar.gz"; sha256 = "0rwzab51hnr6cmm1w5zmfh29gbkg6byv8jnr7frcv5kd6m8kna41"; };
|
|
in
|
|
{
|
|
imports =
|
|
[
|
|
./hardware-configuration.nix
|
|
(import "${home-manager}/nixos")
|
|
];
|
|
|
|
boot = {
|
|
loader.systemd-boot.enable = true;
|
|
kernelParams = [ "i915.enable_psr=0" ];
|
|
};
|
|
|
|
networking.hostName = "x260";
|
|
time.timeZone = "Europe/Amsterdam";
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
|
|
services.xserver = {
|
|
enable = true;
|
|
displayManager.gdm = {
|
|
enable = true;
|
|
};
|
|
desktopManager.gnome.enable = true;
|
|
excludePackages = with pkgs; [ xterm ];
|
|
};
|
|
|
|
users.users.pim = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" ];
|
|
};
|
|
|
|
environment = {
|
|
systemPackages = with pkgs; [
|
|
wget
|
|
curl
|
|
git
|
|
btop
|
|
ripgrep
|
|
vim
|
|
dogdns
|
|
tree
|
|
bat
|
|
];
|
|
gnome.excludePackages = with pkgs; [
|
|
gnome.totem
|
|
gnome-tour
|
|
gnome.epiphany
|
|
gnome.geary
|
|
gnome-console
|
|
gnome.gnome-music
|
|
];
|
|
};
|
|
|
|
system.stateVersion = stateVersion;
|
|
|
|
programs.ssh.knownHosts = {
|
|
dmz = {
|
|
hostNames = ["*.dmz"];
|
|
publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAX2IhgHNxC6JTvLu9cej+iWuG+uJFMXn4AiRro9533x";
|
|
certAuthority = true;
|
|
};
|
|
|
|
hypervisors = {
|
|
hostNames = ["*.hyp"];
|
|
publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFzRkH3d/KVJQouswY/DMpenWbDFVOnI3Vut0xR0e1tb";
|
|
certAuthority = true;
|
|
};
|
|
};
|
|
|
|
security.sudo.extraConfig = ''
|
|
Defaults timestamp_timeout=30
|
|
'';
|
|
|
|
nix = {
|
|
package = pkgs.nixFlakes;
|
|
extraOptions = ''
|
|
experimental-features = nix-command flakes
|
|
'';
|
|
};
|
|
|
|
age.secrets.wg-quick-home-privkey.file = ./secrets/wg-quick-home-privkey.age;
|
|
age.secrets.wg-quick-home-preshared-key.file = ./secrets/wg-quick-home-preshared-key.age;
|
|
age.identityPaths = [ "/home/pim/.ssh/age_ed25519" ];
|
|
|
|
networking.wg-quick = {
|
|
interfaces.home = {
|
|
privateKeyFile = config.age.secrets.wg-quick-home-privkey.path;
|
|
address = [
|
|
"10.225.191.4/24"
|
|
"fd11:5ee:bad:c0de::4/64"
|
|
];
|
|
dns = [ "192.168.30.8" ];
|
|
peers = [{
|
|
presharedKeyFile = config.age.secrets.wg-quick-home-preshared-key.path;
|
|
endpoint = "84.245.14.149:51820";
|
|
publicKey = "fa3mQ7ximJbH7cu2ZbWidto5xBGxEEfWvCCiUDk00Hg=";
|
|
allowedIPs = [
|
|
"0.0.0.0/0"
|
|
"::0/0"
|
|
];
|
|
}];
|
|
};
|
|
};
|
|
}
|