common.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

{ config, pkgs, lib, ... }:

let
  host = config.networking.hostName;
  user = config.userdata.user;
in
{
  disabledModules = [
    "services/networking/pppd.nix"
  ];
  imports = [
    ./modules/userdata.nix

    ./modules/tmux.nix
    ./modules/dev.nix

    ./modules/pppd.nix
  ];

  sops = {
    defaultSopsFile = ./hosts/${host}/secrets.yaml;
    age.keyFile = "/var/secrets/${host}.sops";
  };
  system.stateVersion = "23.11";
  nix.settings.experimental-features = [ "flakes" "nix-command" ];

  boot = {
    tmp.useTmpfs = true;
    loader.timeout = 1;
  };

  users.users.${user} = {
    extraGroups = [ "wheel" ];
    packages = with pkgs; [
      bc
      unzip
      htop
      curl
      file
      dig
      tcpdump
      mtr
      nnn
      ps_mem
      brightnessctl
    ];

    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDCeMXhkjm9CabbA/1xdtP9bvFEm8pVXPk66NmI9/VvQ sinan@vex"
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL8LnyOuPmtKRqAZeHueNN4kfYvpRQVwCivSTq+SZvDU sinan@cez"
    ];
  };

  time.timeZone = "Asia/Kolkata";
  networking.useDHCP = false;
  environment = {
    binsh = "${lib.getExe pkgs.dash}";
    systemPackages = with pkgs; [
      dash
      luajit
      neovim
      sops
    ];
    variables = {
      EDITOR = "nvim";
      VISUAL = "nvim";
    };
    shellAliases = {
      ls = "ls --color=auto --group-directories-first";
      grep = "grep --color=auto";
    };
  };
  services.openssh = {
    enable = true;
    settings.PasswordAuthentication = false;
  };
  programs.bash.promptInit = ''
    if [ "$UID" -ne 0 ]; then
        PROMPT_COLOR="1;32m"
    else
        PROMPT_COLOR="1;31m"
    fi

    PS1="\[\033[$PROMPT_COLOR\][\[\e]0;\u@\h: \w\a\]\u@\h:\w]\\$\[\033[0m\] "
  '';
}