blob: a57024761459b882c3ae7fca19057411fad989e9 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
|
{ config, pkgs, lib, ... }:
let
host = config.networking.hostName;
user = config.userdata.user;
in
{
disabledModules = [
"services/networking/pppd.nix"
];
imports = [
./modules/userdata.nix
./modules/tmux.nix
./modules/dev.nix
./modules/pppd.nix
];
sops = {
defaultSopsFile = ./hosts/${host}/secrets.yaml;
age.keyFile = "/var/secrets/${host}.sops";
};
system.stateVersion = "23.11";
nix.settings.experimental-features = [ "flakes" "nix-command" ];
boot = {
tmp.useTmpfs = true;
loader = {
timeout = 1;
systemd-boot.enable = true;
efi.canTouchEfiVariables = true;
};
};
users.users.${user} = {
extraGroups = [ "wheel" ];
packages = with pkgs; [
bc
unzip
htop
curl
file
dig
mtr
nnn
ps_mem
brightnessctl
];
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDCeMXhkjm9CabbA/1xdtP9bvFEm8pVXPk66NmI9/VvQ sinan@vex"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL8LnyOuPmtKRqAZeHueNN4kfYvpRQVwCivSTq+SZvDU sinan@cez"
];
};
time.timeZone = "Asia/Kolkata";
networking.useDHCP = false;
environment = {
binsh = "${lib.getExe pkgs.dash}";
systemPackages = with pkgs; [
dash
luajit
neovim
sops
];
variables = {
EDITOR = "nvim";
VISUAL = "nvim";
};
shellAliases = {
ls = "ls --color=auto --group-directories-first";
grep = "grep --color=auto";
};
};
services.openssh = {
enable = true;
settings.PasswordAuthentication = false;
};
programs.bash.promptInit = ''
if [ "$UID" -ne 0 ]; then
PROMPT_COLOR="1;32m"
else
PROMPT_COLOR="1;31m"
fi
PS1="\[\033[$PROMPT_COLOR\][\[\e]0;\u@\h: \w\a\]\u@\h:\w]\\$\[\033[0m\] "
'';
}
|
