char/topaz-flake

git clone https://git.t4t.associates/char/topaz-flake

Charlotte Somadd key for remote buildcb538f5

main
branchesmainall refs →
1.4 KiB56 linesraw
1{ pkgs, unstable-pkgs, ... }: {
2  boot.tmp.cleanOnBoot = true;
3  zramSwap.enable = true;
4
5  networking.hostName = "topaz";
6  time.timeZone = "UTC";
7  networking.firewall.enable = false;
8
9  services.openssh.enable = true;
10  services.openssh.settings.PasswordAuthentication = false;
11
12  security.sudo.wheelNeedsPassword = false;
13
14  users.users.charlotte = {
15    isNormalUser = true;
16    description = "charlotte";
17    extraGroups = ["wheel"];
18    shell = pkgs.zsh;
19  };
20
21  programs.zsh.enable = true;
22  programs.git.enable = true;
23  programs.vim = {
24    enable = true;
25    defaultEditor = true;
26    package = unstable-pkgs.vim;
27  };
28
29  environment.shells = [ pkgs.zsh ];
30  environment.variables = {
31    EDITOR = "vim";
32    VISUAL = "vim";
33    SYSTEMD_EDITOR = "vim";
34  };
35
36  nixpkgs.config.allowUnfree = true;
37  programs.nix-ld.enable = true;
38
39  environment.systemPackages =
40    (with pkgs; [gcc binutils pkg-config glibc gnumake cmake]) ++
41    (with pkgs; [wget htop tmux]) ++
42    (with unstable-pkgs; [vim jujutsu deno sqlite-interactive]);
43  services.tailscale.enable = true;
44
45  security.acme = {
46    acceptTerms = true;
47    defaults.email = "half-kh-hacker@hackery.site";
48    defaults.webroot = "/var/lib/acme/acme-challenge/";
49  };
50  users.groups.certs = {
51    members = [ "nginx" "prosody" ];
52  };
53
54  nix.settings.trusted-public-keys = [ "runestone:zZhLpoLn/vHqjINbOuxqYwEQl21ry/nqTXIE1QAd7KQ=" ];
55  nix.settings.require-sigs = false;
56}