83 lines
2.1 KiB
Nix
83 lines
2.1 KiB
Nix
{
|
|
inputs,
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}: {
|
|
imports = lib.flatten [
|
|
(map lib.custom.relativeToRoot [
|
|
"modules/common/host-spec.nix"
|
|
"hosts/common/core/ssh.nix"
|
|
"hosts/common/users/primary"
|
|
"hosts/common/users/primary/nixos.nix"
|
|
"hosts/common/optional/minimal-user.nix"
|
|
])
|
|
];
|
|
|
|
hostSpec = {
|
|
isMinimal = lib.mkForce true;
|
|
hostName = "installer";
|
|
# FIXME(starter): Add your primary username or whatever user you want to use for installation
|
|
username = "user";
|
|
};
|
|
|
|
fileSystems."/boot".options = ["umask=0077"]; # Removes permissions and security warnings.
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
boot.loader.systemd-boot = {
|
|
enable = true;
|
|
# we use Git for version control, so we don't need to keep too many generations.
|
|
configurationLimit = lib.mkDefault 3;
|
|
# pick the highest resolution for systemd-boot's console.
|
|
consoleMode = lib.mkDefault "max";
|
|
};
|
|
boot.initrd = {
|
|
systemd.enable = true;
|
|
systemd.emergencyAccess = true; # Don't need to enter password in emergency mode
|
|
};
|
|
boot.kernelParams = [
|
|
"systemd.setenv=SYSTEMD_SULOGIN_FORCE=1"
|
|
"systemd.show_status=true"
|
|
#"systemd.log_level=debug"
|
|
"systemd.log_target=console"
|
|
"systemd.journald.forward_to_console=1"
|
|
];
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
wget
|
|
curl
|
|
rsync
|
|
git
|
|
];
|
|
|
|
networking = {
|
|
networkmanager.enable = true;
|
|
};
|
|
|
|
services = {
|
|
qemuGuest.enable = true;
|
|
openssh = {
|
|
enable = true;
|
|
ports = [22];
|
|
settings.PermitRootLogin = "yes";
|
|
authorizedKeysFiles = lib.mkForce ["/etc/ssh/authorized_keys.d/%u"];
|
|
};
|
|
};
|
|
|
|
nix = {
|
|
# registry and nixPath shouldn't be required here because flakes but removal results in warning spam on build
|
|
registry = lib.mapAttrs (_: value: {flake = value;}) inputs;
|
|
nixPath = lib.mapAttrsToList (key: value: "${key}=${value.to.path}") config.nix.registry;
|
|
|
|
settings = {
|
|
experimental-features = [
|
|
"nix-command"
|
|
"flakes"
|
|
];
|
|
warn-dirty = false;
|
|
};
|
|
};
|
|
|
|
system.stateVersion = "24.11";
|
|
}
|