171 lines
3.7 KiB
Nix
171 lines
3.7 KiB
Nix
# Edit this configuration file to define what should be installed on
|
||
# your system. Help is available in the configuration.nix(5) man page
|
||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||
|
||
{
|
||
config,
|
||
pkgs,
|
||
pkgs-unstable,
|
||
inputs,
|
||
configPath,
|
||
hostname,
|
||
lib,
|
||
...
|
||
}:
|
||
|
||
{
|
||
nix.settings.experimental-features = ["nix-command" "flakes"];
|
||
|
||
# Nix optimizations
|
||
nix.optimise.automatic = true;
|
||
# nix.settings.auto-optimise-store = true;
|
||
nix.gc = {
|
||
automatic = true;
|
||
interval = [{
|
||
Hour = 2;
|
||
Minute = 30;
|
||
Weekday = 7;
|
||
}];
|
||
# persistent = true;
|
||
options = "--delete-older-than 30d";
|
||
};
|
||
|
||
networking.hostName = "eva-02"; # Define your hostname.
|
||
# Configure network proxy if necessary
|
||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||
|
||
# Set your time zone.
|
||
time.timeZone = "America/Los_Angeles";
|
||
|
||
# Enable the X11 windowing system.
|
||
# You can disable this if you're only using the Wayland session.
|
||
# services.xserver.enable = true; # Enable for Darwin compatibility
|
||
|
||
# Enable sound with pipewire.
|
||
# hardware.pulseaudio.enable = false;
|
||
#hardware.pulseaudio = {
|
||
# enable = true;
|
||
# package = pkgs.pulseaudioFull;
|
||
#};
|
||
|
||
# Enable Touch ID
|
||
security.pam.services.sudo_local.touchIdAuth = true;
|
||
|
||
|
||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||
system.primaryUser = "rogueking";
|
||
programs.zsh.enable = true;
|
||
users.users.rogueking = {
|
||
# isNormalUser = true;
|
||
description = "rogueking";
|
||
# extraGroups = [ "admin" "staff" "wheel" "docker" ];
|
||
home = "/Users/rogueking";
|
||
shell = pkgs.zsh;
|
||
packages = with pkgs; [
|
||
#apps
|
||
vscode
|
||
#cli
|
||
];
|
||
};
|
||
|
||
homebrew = {
|
||
enable = true;
|
||
onActivation.autoUpdate = true;
|
||
casks = [
|
||
"1password"
|
||
"1password-cli"
|
||
"docker"
|
||
];
|
||
};
|
||
|
||
# Install firefox.
|
||
# programs.firefox.enable = true;
|
||
|
||
# Allow unfree packages
|
||
nixpkgs.config.allowUnfree = true;
|
||
|
||
# Enable OpenSSH daemon
|
||
# services.openssh = {
|
||
# enable = true;
|
||
# # ports = [ 22 ];
|
||
# settings = {
|
||
# PasswordAuthentication = true;
|
||
# AllowUsers = [ "rogueking" ];
|
||
# UseDns = true;
|
||
# X11Forwarding = false;
|
||
# PermitRootLogin = "no";
|
||
# MaxAuthTries = 8;
|
||
# };
|
||
# };
|
||
|
||
users.users."rogueking".openssh.authorizedKeys.keys = [
|
||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINXqriPZVIuduc/J7GS1mD171LL0gIbgEjlImsxedWVX"
|
||
];
|
||
|
||
# List packages installed in system profile. To search, run:
|
||
# $ nix search wget
|
||
environment.systemPackages = with pkgs; [
|
||
#apps
|
||
|
||
#cli tools
|
||
btop
|
||
curl
|
||
docker
|
||
dust
|
||
file
|
||
findutils
|
||
git
|
||
kopia
|
||
lazydocker
|
||
nettools
|
||
nix-prefetch-github
|
||
nmap
|
||
openssh
|
||
openssl
|
||
ptunnel
|
||
tailscale
|
||
unzip
|
||
vim
|
||
|
||
nerd-fonts.hack
|
||
nerd-fonts.fira-code
|
||
];
|
||
|
||
home-manager = {
|
||
extraSpecialArgs = {
|
||
inherit
|
||
configPath
|
||
inputs
|
||
pkgs-unstable
|
||
hostname
|
||
;
|
||
};
|
||
users = {
|
||
"rogueking" = import ./../../home-manager/home.nix;
|
||
};
|
||
backupFileExtension = "backup";
|
||
};
|
||
|
||
# Some programs need SUID wrappers, can be configured further or are
|
||
# started in user sessions.
|
||
# programs.mtr.enable = true;
|
||
# programs.gnupg.agent = {
|
||
# enable = true;
|
||
# enableSSHSupport = true;
|
||
# };
|
||
|
||
# List services that you want to enable:
|
||
|
||
# Enable the OpenSSH daemon.
|
||
# services.openssh.enable = true;
|
||
|
||
# Open ports in the firewall.
|
||
# networking.firewall.allowedTCPPorts = [ ... ];
|
||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||
# Or disable the firewall altogether.
|
||
# networking.firewall.enable = false;
|
||
|
||
system.stateVersion = 6;
|
||
}
|