40 lines
756 B
Nix
40 lines
756 B
Nix
|
{ inputs, pkgs, ...}: {
|
||
|
|
nixpkgs.config.allowUnfree = true;
|
||
|
|
nix.settings.trusted-users = [ "root" "@wheel" ];
|
||
|
|
nix.registry.nixpkgs.flake = inputs.nixpkgs;
|
||
|
|
nix.extraOptions = ''
|
||
|
|
experimental-features = nix-command flakes
|
||
|
|
'';
|
||
|
|
nix.gc = {
|
||
|
|
automatic = true;
|
||
|
|
options = "--delete-older-than 21d";
|
||
|
|
};
|
||
|
|
|
||
|
|
security.sudo.wheelNeedsPassword = false;
|
||
|
|
services.openssh = {
|
||
|
|
enable = true;
|
||
|
|
settings = {
|
||
|
|
PasswordAuthentication = false;
|
||
|
|
KbdInteractiveAuthentication = false;
|
||
|
|
PermitRootLogin = "prohibit-password";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
environment.systemPackages = with pkgs; [
|
||
|
|
python3
|
||
|
|
vim
|
||
|
|
tmux
|
||
|
|
jq
|
||
|
|
yq
|
||
|
|
tree
|
||
|
|
git
|
||
|
|
bind.dnsutils
|
||
|
|
openssl
|
||
|
|
curl
|
||
|
|
htop
|
||
|
|
pinentry
|
||
|
|
gnupg
|
||
|
|
sequoia
|
||
|
|
];
|
||
|
|
}
|