{lib, config, pkgs, ...}: { imports = [ ../modules/sops ]; nix.settings.experimental-features = [ "nix-command" "flakes" ]; nixpkgs.config.allowUnfree = true; environment.variables.EDITOR = "vim"; time.timeZone = "Europe/Berlin"; services.openssh = { enable = true; settings = { X11Forwarding = true; PermitRootLogin = "no"; PasswordAuthentication = false; }; openFirewall = true; }; # Disable password checking for wheel group users so we can solely rely on ssh keys security.sudo.wheelNeedsPassword = false; environment.systemPackages = with pkgs; [ git vim wget curl htop ]; }