holy moly we're almost there

2022-09-19 08:13:50 +10:00
commit 3693732aac
203 changed files with 17247 additions and 0 deletions
@@ -0,0 +1,49 @@
+{ self, config, lib, pkgs, ... }:
+let inherit (lib) fileContents;
+in
+{
+  imports = [ ../cachix ];
+
+  nix.systemFeatures = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
+
+  fonts = {
+    fonts = with pkgs; [ powerline-fonts dejavu_fonts ];
+    fontconfig.defaultFonts = {
+      monospace = [ "DejaVu Sans Mono for Powerline" ];
+      sansSerif = [ "DejaVu Sans" ];
+    };
+  };
+
+  nix = {
+    autoOptimiseStore = true;
+    gc.automatic = true;
+    optimise.automatic = true;
+    useSandbox = true;
+    allowedUsers = [ "@wheel" ];
+    trustedUsers = [ "root" "@wheel" ];
+    extraOptions = ''
+      min-free = 536870912
+      keep-outputs = true
+      keep-derivations = true
+      fallback = true
+    '';
+  };
+
+  environment.systemPackages = with pkgs; [
+    pinentry_gnome
+    cached-nix-shell
+  ];
+
+  services.devmon.enable = true;
+
+  # For rage encryption, all hosts need a ssh key pair
+  services.openssh = {
+    enable = true;
+    openFirewall = lib.mkDefault false;
+  };
+
+  programs.gnupg.agent.enable = true;
+  #programs.gnupg.agent.pinentryFlavor = "curses";
+
+  services.earlyoom.enable = true;
+}