Files
nix-config/base.nix

97 lines
1.8 KiB
Nix

{
pkgs,
...
}:
{
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
networking.networkmanager.enable = true;
time.timeZone = "Europe/Oslo";
i18n.defaultLocale = "en_US.UTF-8";
console = {
keyMap = "no";
};
environment.systemPackages = with pkgs; [
git
];
nix.settings = {
pure-eval = true;
experimental-features = [
"nix-command"
"flakes"
];
use-xdg-base-directories = true;
trusted-users = [ "vbm" ];
substituters = [
"https://cache.nixos.org/"
"https://nix-community.cachix.org"
"https://nixpkgs-unfree.cachix.org"
];
trusted-public-keys = [
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
"nixpkgs-unfree.cachix.org-1:hqvoInulhbV4nJ9yJOEr+4wxhDV4xq2d1DK7S6Nj6rs="
];
builders-use-substitutes = true;
};
services.keyd = {
enable = true;
keyboards = {
default = {
ids = [ "*" ];
settings = {
main = {
capslock = "esc";
esc = "capslock";
leftalt = "leftmeta";
leftmeta = "leftalt";
};
};
};
};
};
services.openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
PermitRootLogin = "no";
};
};
security.doas = {
enable = true;
extraRules = [
{
users = [ "vbm" ];
keepEnv = true;
persist = true;
}
];
};
security.sudo.enable = false;
security.polkit.enable = true;
users.users.vbm = {
isNormalUser = true;
extraGroups = [
"wheel"
];
shell = pkgs.nushell;
packages = with pkgs; [
ripgrep
fd
];
};
}