lynatic/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

base profile reformatted

Browse source
This commit is contained in:
Lyn 2024-11-13 22:40:55 +01:00
parent 0743facbde
commit aa16354a39
1 changed files with 20 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

32
modules/profiles/base.nix
View file

@ -1,6 +1,11 @@
{lib, config, pkgs, ...}: {
{
lib,
config,
pkgs,
...
}: {
lyn.sops.enable = true;
nix.settings.experimental-features = [ "nix-command" "flakes" ];
nix.settings.experimental-features = ["nix-command" "flakes"];
nixpkgs.config.allowUnfree = true;
nix.package = config.pkgsInstances.unstable.lix;
environment.variables.EDITOR = "nvim";
@ -13,21 +18,21 @@
networking.firewall.allowPing = true;
# SSH:
services.openssh = {
enable = true;
settings = {
X11Forwarding = true;
PermitRootLogin = "yes";
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
};
openFirewall = true;
enable = true;
settings = {
X11Forwarding = true;
PermitRootLogin = "yes";
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
};
openFirewall = true;
};
# Disable password checking for wheel group users so we can rely on ssh keys.
# WARNING: This has an security impact!
security.sudo.wheelNeedsPassword = false;
environment.systemPackages = with pkgs; [
environment.systemPackages = with pkgs; [
git
vim
neovim
@ -35,9 +40,8 @@
curl
htop
];
# Use encrypted Quad9 DNS
networking.nameservers = [ "127.0.0.1" "::1" ];
networking.nameservers = ["127.0.0.1" "::1"];
services.dnscrypt-proxy2 = {
enable = true;
settings = {
@ -54,7 +58,7 @@
};
# You can choose a specific set of servers from https://github.com/DNSCrypt/dnscrypt-resolvers/blob/master/v3/public-resolvers.md
server_names = ["quad9-dnscrypt-ip4-nofilter-pri" "quad9-dnscrypt-ip6-nofilter-pri"];
server_names = ["quad9-dnscrypt-ip4-nofilter-pri" "quad9-dnscrypt-ip6-nofilter-pri"];
};
};