100 lines
1.7 KiB
Nix
100 lines
1.7 KiB
Nix
{ config, pkgs, lib, ... }:
|
|
let
|
|
secrets = import ./secrets.nix;
|
|
in
|
|
{
|
|
imports =
|
|
[
|
|
(fetchTarball "https://github.com/msteen/nixos-vscode-server/tarball/master")
|
|
];
|
|
|
|
environment.shells = with pkgs; [ bashInteractive zsh ];
|
|
|
|
services = {
|
|
vnstat.enable = true;
|
|
tuptime.enable = true;
|
|
vscode-server.enable = true;
|
|
openssh = {
|
|
enable = true;
|
|
permitRootLogin = "no";
|
|
passwordAuthentication = false;
|
|
openFirewall = true;
|
|
};
|
|
nextdns = {
|
|
enable = true;
|
|
arguments = [
|
|
"-config" secrets.nextdnshash
|
|
"-cache-size" "10MB"
|
|
"-listen" "127.0.0.1:53"
|
|
"-forwarder" secrets.nextdnsforwarder
|
|
"-report-client-info"
|
|
];
|
|
};
|
|
fwupd.enable = true;
|
|
};
|
|
|
|
networking = {
|
|
nameservers = [ "127.0.0.1" "::1" ];
|
|
# If using dhcpcd:
|
|
dhcpcd.extraConfig = "nohook resolv.conf";
|
|
# If using NetworkManager:
|
|
networkmanager.dns = "none";
|
|
};
|
|
|
|
programs.gnupg.agent = {
|
|
enable = true;
|
|
pinentryFlavor = "curses";
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
ack
|
|
borgbackup
|
|
broot
|
|
btrfs-progs
|
|
bwm_ng
|
|
cargo
|
|
exa
|
|
ffmpeg
|
|
gnupg
|
|
gocryptfs
|
|
home-manager
|
|
inxi
|
|
iotop
|
|
lm_sensors
|
|
lsd
|
|
lsof
|
|
manpages
|
|
nix-du
|
|
nmap
|
|
nodejs
|
|
pciutils
|
|
ruby
|
|
tealdeer
|
|
unixtools.xxd
|
|
unzip
|
|
usbutils
|
|
wget
|
|
graphviz
|
|
nix-tree
|
|
];
|
|
|
|
documentation.enable = false;
|
|
|
|
nix.autoOptimiseStore = true;
|
|
|
|
boot = {
|
|
tmpOnTmpfs = true;
|
|
kernelParams = [ "quiet" ];
|
|
consoleLogLevel = 0;
|
|
kernel.sysctl = {
|
|
"vm.max_map_count" = 262144;
|
|
};
|
|
};
|
|
|
|
nix.gc = {
|
|
automatic = true;
|
|
dates = "weekly";
|
|
options = "--delete-older-than 30d";
|
|
};
|
|
}
|