blob: 5f48baad731f8448bb758d2f2d6ad4c527db8c33 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
{ pkgs, lib, config, inputs, ... }:
{
imports = [
../profiles/security.nix
../profiles/network.nix
];
config = {
system.stateVersion = "22.5";
nix = {
registry.nixpgs.flake = inputs.nixpkgs;
gc.automatic = true;
optimise.automatic = true;
settings = {
allowed-users = ["root"];
trusted-users = ["root"];
sandbox = true;
};
extraOptions = ''
experimental-features = nix-command flakes
'';
};
users.mutableUsers = false;
environment.defaultPackages = lib.mkForce [];
age.identityPaths = [ "/nix/persist/etc/ssh/ssh_host_ed25519_key" ];
programs.command-not-found.dbPath = inputs.programsdb.packages.${pkgs.system}.programs-sqlite;
# save uid/guid
environment.persistence."/nix/persist".directories = [ "/var/lib/nixos" ];
};
}
|