51 lines
1.6 KiB
Nix
51 lines
1.6 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
{
|
|
config = {
|
|
systemSettings = {
|
|
# users
|
|
users = [ "emmet" ];
|
|
adminUsers = [ "emmet" ];
|
|
|
|
# hardware
|
|
cachy.enable = true;
|
|
cachy.variant = "server";
|
|
|
|
virtualization = {
|
|
docker.enable = true;
|
|
};
|
|
|
|
# dotfiles
|
|
dotfilesDir = "/etc/nixos";
|
|
|
|
# security
|
|
security = {
|
|
automount.enable = false;
|
|
blocklist.enable = true;
|
|
doas.enable = true;
|
|
firejail.enable = false; # TODO setup firejail profiles
|
|
firewall.enable = true;
|
|
gpg.enable = true;
|
|
sshd.enable = true;
|
|
};
|
|
|
|
};
|
|
|
|
user.users.emmet.openssh.authorizedKeys.keys = [
|
|
"ssh-rsa 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 emmet@snowfire"
|
|
];
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
rclone
|
|
rdiff-backup
|
|
rsnapshot
|
|
cryptsetup
|
|
gocryptfs
|
|
attic-client
|
|
];
|
|
|
|
programs.fuse.userAllowOther = true;
|
|
};
|
|
|
|
}
|