base config

configuration.nix

@@ -0,0 +1,97 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running `nixos-help`).
+
+{ config, pkgs, ... }:
+
+{
+  imports =
+    [
+      ./hardware-configuration.nix
+    ];
+
+  # Use the GRUB 2 boot loader.
+  boot.loader.grub.enable = true;
+  boot.loader.grub.device = "/dev/sda";
+
+  networking.hostName = "gitea"; # Define your hostname.
+  # Set your time zone.
+  time.timeZone = "Europe/Berlin";
+
+
+  # Enable CUPS to print documents.
+  # services.printing.enable = true;
+
+  # Enable sound.
+  # sound.enable = true;
+  # hardware.pulseaudio.enable = true;
+
+  # Define groups because apparently we gotta do that
+  # users.groups.onedriveaccess = {}; 
+  # users.groups.onedriveaccess.gid = 3000;
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  users.users.lyn = {
+    	isNormalUser = true;
+   	extraGroups = [ "wheel"];
+    	openssh.authorizedKeys.keys = [
+		"ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBC7NUaBJOYgMnT2uUUUSB7gKaqqbgxXDghBkRqSGuZrAZzZYHlHH7nM6Re7+yOYMSoJGLaB4iaUDLSBBnyA6pLI= nixos_gitea@secretive.MacBook-Pro-(2).local"
+	];
+	packages = with pkgs; [
+      	rclone
+    ];
+};
+
+  # List packages installed in system profile. To search, run:
+  # $ nix search wget
+  environment.systemPackages = with pkgs; [
+    vim 
+    wget
+  ];
+  
+  # Create folders
+#  systemd.tmpfiles.rules = [
+#	"d /mnt/onedrive/Timemachine 0772 lyn onedriveaccess"
+#];
+
+
+  # Enable the OpenSSH daemon.
+  services.openssh = {
+	enable = true;
+	settings = {
+		X11Forwarding = true;
+		PermitRootLogin = "no";
+		PasswordAuthentication = false;
+	};
+	
+	openFirewall = true;
+
+  };
+  # Disable password checking for wheel group users so we can solely rely on ssh keys
+  security.sudo.wheelNeedsPassword = false;
+
+  # Firewall stuff:
+  networking.firewall.enable = true;
+  networking.firewall.allowPing = true;
+  services.samba.openFirewall = true;
+  # Open ports in the firewall.
+  # networking.firewall.allowedTCPPorts = [ ... ];
+  # networking.firewall.allowedUDPPorts = [ ... ];
+  # Or disable the firewall altogether.
+  # networking.firewall.enable = false;
+
+  # Copy the NixOS configuration file and link it from the resulting system
+  # (/run/current-system/configuration.nix). This is useful in case you
+  # accidentally delete configuration.nix.
+  # system.copySystemConfiguration = true;
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It's perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "23.05"; # Did you read the comment?
+
+}
+