flake/meta/profiles/base.nix

{lib, config, pkgs, ...}: {
  imports = [
  ../modules/sops
  ];
  nix.settings.experimental-features = [ "nix-command" "flakes" ];
  nixpkgs.config.allowUnfree = true;
  
  environment.variables.EDITOR = "vim";  
  
  time.timeZone = "Europe/Berlin";

  services.openssh = {
	enable = true;
	settings = {
		X11Forwarding = true;
		PermitRootLogin = "no";
		PasswordAuthentication = false;
	};
	openFirewall = true;
  };
  # Disable password checking for wheel group users so we can solely rely on ssh keys
  security.sudo.wheelNeedsPassword = false;

   environment.systemPackages = with pkgs; [
    git
    vim 
    wget
    curl
    htop
  ];
}