lynatic/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

base profile reformatted

Browse source
This commit is contained in:
Lyn 2024-11-13 22:40:55 +01:00
parent 0743facbde
commit aa16354a39
1 changed files with 20 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
modules/profiles/base.nix
View file

@ -1,10 +1,15 @@
{lib, config, pkgs, ...}: { {
lib,
config,
pkgs,
...
}: {
lyn.sops.enable = true; lyn.sops.enable = true;
nix.settings.experimental-features = [ "nix-command" "flakes" ]; nix.settings.experimental-features = ["nix-command" "flakes"];
nixpkgs.config.allowUnfree = true; nixpkgs.config.allowUnfree = true;
nix.package = config.pkgsInstances.unstable.lix; nix.package = config.pkgsInstances.unstable.lix;
environment.variables.EDITOR = "nvim"; environment.variables.EDITOR = "nvim";
# TODO # TODO
time.timeZone = "Europe/Berlin"; time.timeZone = "Europe/Berlin";
@ -13,31 +18,30 @@
networking.firewall.allowPing = true; networking.firewall.allowPing = true;
# SSH: # SSH:
services.openssh = { services.openssh = {
enable = true; enable = true;
settings = { settings = {
X11Forwarding = true; X11Forwarding = true;
PermitRootLogin = "yes"; PermitRootLogin = "yes";
PasswordAuthentication = false; PasswordAuthentication = false;
KbdInteractiveAuthentication = false; KbdInteractiveAuthentication = false;
}; };
openFirewall = true; openFirewall = true;
}; };
# Disable password checking for wheel group users so we can rely on ssh keys. # Disable password checking for wheel group users so we can rely on ssh keys.
# WARNING: This has an security impact! # WARNING: This has an security impact!
security.sudo.wheelNeedsPassword = false; security.sudo.wheelNeedsPassword = false;
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
git git
vim vim
neovim neovim
wget wget
curl curl
htop htop
]; ];
# Use encrypted Quad9 DNS # Use encrypted Quad9 DNS
networking.nameservers = [ "127.0.0.1" "::1" ]; networking.nameservers = ["127.0.0.1" "::1"];
services.dnscrypt-proxy2 = { services.dnscrypt-proxy2 = {
enable = true; enable = true;
settings = { settings = {
@ -54,7 +58,7 @@
}; };
# You can choose a specific set of servers from https://github.com/DNSCrypt/dnscrypt-resolvers/blob/master/v3/public-resolvers.md # You can choose a specific set of servers from https://github.com/DNSCrypt/dnscrypt-resolvers/blob/master/v3/public-resolvers.md
server_names = ["quad9-dnscrypt-ip4-nofilter-pri" "quad9-dnscrypt-ip6-nofilter-pri"]; server_names = ["quad9-dnscrypt-ip4-nofilter-pri" "quad9-dnscrypt-ip6-nofilter-pri"];
}; };
}; };