hosts/cez/configuration.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

{ config, pkgs, ... }:

let
  user = config.userdata.user;
in
{
  imports = [
    ./hardware-configuration.nix
    ./modules/wayland.nix
    ./modules/sshfs.nix
    ./modules/wireguard.nix
    ./modules/network.nix
    ../../common.nix
  ];

  boot = {
    initrd.luks.reusePassphrases = true;
    consoleLogLevel = 3;
    kernelPackages = pkgs.linuxPackages_latest;
  };

  sound = {
    enable = true;
    extraConfig = ''
      defaults.pcm.card 1
      defaults.ctl.card 1
    '';
  };

  services = {
    pipewire = {
      enable = true;
      pulse.enable = true;
    };
    openssh = {
      enable = true;
      settings.PasswordAuthentication = false;
    };
    getty.autologinUser = user;
  };

  userdata.packages = with pkgs; [
    geoipWithDatabase
    ffmpeg
    (pass.withExtensions (exts: [ exts.pass-otp ]))
  ];

  programs.adb.enable = true;
  userdata.groups = [ "adbusers" ];
}