blob: 593f291ef446756e10a010550424d9a228d25715 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
|
{
pkgs,
inputs,
...
}:
{
imports = [
inputs.impermanence.nixosModules.impermanence
inputs.disko.nixosModules.disko
./headscale.nix
./caddy.nix
./disko.nix
];
# disable local builds of anything, machine doesn't have enough RAM
nix.settings.max-jobs = 0;
services.btrfs.autoScrub = {
enable = true;
interval = "weekly";
fileSystems = [ "/" ];
};
services.resolved.enable = true;
networking = {
networkmanager = {
enable = true;
dns = "systemd-resolved";
};
useDHCP = false;
nameservers = [
"1.1.1.1"
"1.0.0.1"
];
defaultGateway = {
address = "202.61.248.1";
interface = "ens3";
};
interfaces.ens3 = {
useDHCP = false;
ipv4.addresses = [
{
address = "202.61.250.164";
prefixLength = 22;
}
];
ipv6.addresses = [
{
# 2a03:4000:54:b01:78a4:47ff:fea1:3e43/64
address = "2a03:4000:54:b01::";
prefixLength = 64;
}
];
};
};
time.timeZone = "Europe/Berlin";
security.sudo.extraConfig = ''
Defaults lecture = never
'';
boot.loader = {
systemd-boot.enable = true;
efi.canTouchEfiVariables = true;
};
users = {
users.isabella = {
isNormalUser = true;
description = "Isabella Morgana Bastaja";
extraGroups = [ "wheel" ];
initialPassword = "isabella";
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM4aG8NI25TgjcDevjsY/Y6d3iYsQxSEtIpsqprMHmad osiris@underworld"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPUcWGKF3uIf/gqbo1/lxb8XLoi67Bc2tVi1Bd/Ddhoz isabella@wonderland"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEvtzeVHgenfSUrpZeyZBoBTzN96rdYMy3KEJoRXja0O isabella@nyaan"
];
};
mutableUsers = false;
};
console.keyMap = "us";
services.openssh = {
enable = true;
ports = [ 22 ];
openFirewall = true;
settings = {
PermitRootLogin = "no";
PasswordAuthentication = false;
AllowUsers = [
"isabella"
];
};
};
environment = {
systemPackages = [
pkgs.git
pkgs.helix
];
};
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. It‘s perfectly fine and recommended to leave
# this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
system.stateVersion = "26.05"; # Did you read the comment?
}
|
