83 lines
1.8 KiB
Nix
83 lines
1.8 KiB
Nix
|
{ config, lib, pkgs, modulesPath, ... }: {
|
||
|
|
|
||
|
|
# Start out with a minimal system
|
||
|
|
imports = [
|
||
|
|
(modulesPath + "/profiles/image-based-appliance.nix")
|
||
|
|
(modulesPath + "/profiles/perlless.nix")
|
||
|
|
(modulesPath + "/profiles/qemu-guest.nix")
|
||
|
|
];
|
||
|
|
|
||
|
|
# system.forbiddenDependenciesRegexes = lib.mkForce [ ];
|
||
|
|
|
||
|
|
nixpkgs.flake.setNixPath = false;
|
||
|
|
nixpkgs.flake.setFlakeRegistry = false;
|
||
|
|
|
||
|
|
networking.hostName = "patos";
|
||
|
|
|
||
|
|
boot.kernelModules = [
|
||
|
|
"zram"
|
||
|
|
"usb_storage"
|
||
|
|
"uas"
|
||
|
|
"sd_mod"
|
||
|
|
"r8169"
|
||
|
|
"ehci-hcd"
|
||
|
|
"ehci-pci"
|
||
|
|
"xhci-hcd"
|
||
|
|
"xhci-pci"
|
||
|
|
"xhci-pci-renesas"
|
||
|
|
"nvme"
|
||
|
|
"virtio_net"
|
||
|
|
];
|
||
|
|
|
||
|
|
system.etc.overlay.mutable = lib.mkDefault false;
|
||
|
|
users.mutableUsers = lib.mkDefault false;
|
||
|
|
|
||
|
|
users.allowNoPasswordLogin = true;
|
||
|
|
|
||
|
|
programs.nano.enable = false;
|
||
|
|
|
||
|
|
boot.tmp.useTmpfs = true;
|
||
|
|
|
||
|
|
# Replace sudo with doas
|
||
|
|
security.sudo.enable = lib.mkDefault false;
|
||
|
|
security.doas.enable = lib.mkDefault true;
|
||
|
|
|
||
|
|
environment.systemPackages = with pkgs; [
|
||
|
|
(lib.mkIf config.security.doas.enable doas-sudo-shim)
|
||
|
|
iotop
|
||
|
|
];
|
||
|
|
|
||
|
|
services.openssh.settings.PasswordAuthentication = lib.mkDefault false;
|
||
|
|
|
||
|
|
systemd.watchdog = lib.mkDefault {
|
||
|
|
runtimeTime = "10s";
|
||
|
|
rebootTime = "30s";
|
||
|
|
};
|
||
|
|
|
||
|
|
zramSwap.enable = true;
|
||
|
|
|
||
|
|
i18n.supportedLocales = [
|
||
|
|
"en_US.UTF-8/UTF-8"
|
||
|
|
];
|
||
|
|
|
||
|
|
boot.consoleLogLevel = lib.mkDefault 1;
|
||
|
|
|
||
|
|
systemd.services."getty@tty1".enable = lib.mkDefault false;
|
||
|
|
systemd.services."autovt@".enable = lib.mkDefault false;
|
||
|
|
|
||
|
|
systemd.enableEmergencyMode = false;
|
||
|
|
|
||
|
|
boot.kernelParams = [ "panic=1" "boot.panic_on_fail" "nomodeset" ];
|
||
|
|
|
||
|
|
programs.vim.enable = true;
|
||
|
|
programs.vim.defaultEditor = lib.mkDefault true;
|
||
|
|
|
||
|
|
services.journald.storage = "volatile";
|
||
|
|
|
||
|
|
console.enable = false;
|
||
|
|
|
||
|
|
networking.useNetworkd = true;
|
||
|
|
systemd.network.wait-online.enable = lib.mkDefault false;
|
||
|
|
|
||
|
|
}
|