Files
2026-05-19 22:00:04 +02:00

88 lines
1.7 KiB
Nix

{
pkgs,
lib,
...
}: {
imports = [
./nix/nix.nix
./nix/impermanence.nix
];
security.sudo.wheelNeedsPassword = lib.mkForce true;
security.sudo.extraConfig = ''
Defaults lecture="never"
'';
boot.loader = {
# Hide the boot loader and show it only on keypress.
timeout = 0;
systemd-boot = {
enable = true;
configurationLimit = 4;
# A real mode for hidpi
consoleMode = "max";
};
efi.canTouchEfiVariables = true;
};
services.avahi = {
enable = true;
nssmdns4 = true;
openFirewall = true;
denyInterfaces = [ "docker0" "veth*" ];
publish = {
enable = true;
addresses = true;
workstation = true;
};
};
services.automatic-timezoned.enable = true;
programs.dconf.enable = true;
services.dbus.enable = true;
programs.gnupg.agent = {
enable = true;
enableSSHSupport = true;
};
environment.systemPackages = with pkgs; [
docker-compose
git
man-pages
man-pages-posix
vim
tmux
jq
mosh
# https://github.com/NixOS/nixpkgs/issues/463295 (telepresence needs a system wide iptables)
iptables
telepresence2
];
# also needed for telepresence
programs.fuse.userAllowOther = true;
programs.zsh.enable = true;
environment.shells = with pkgs; [zsh];
programs.nix-index-database.comma.enable = true;
services.locate = {
enable = true;
package = pkgs.mlocate;
interval = "hourly";
};
virtualisation.docker.enable = true;
documentation = {
enable = true;
dev.enable = true;
man = {
enable = true;
cache.enable = true;
};
info.enable = true;
nixos.enable = true;
};
}