profiles/core.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

{ pkgs, lib, config, inputs, ... }:

{
  imports = [
    ../profiles/security.nix
    ../profiles/network.nix
  ];
  config = {
    system.stateVersion = "22.5";
    nix = {
      registry.nixpgs.flake = inputs.nixpkgs;
      gc.automatic = true;
      optimise.automatic = true;
      settings = {
        allowed-users = ["root"];
        trusted-users = ["root"];
        sandbox = true;
      };
      extraOptions = ''
        experimental-features = nix-command flakes
      '';
    };
    users.mutableUsers = false;
    environment.defaultPackages = lib.mkForce [];

    # dont do this
    users.users.root.initialPassword = "hunter2";

    age.identityPaths = [ "/nix/persist/etc/ssh/ssh_host_ed25519_key" ];
  };
}