Attempting to migrate off digga...

2022-12-06 17:09:27 +10:00
parent 0051488eb1
commit f5a0ad9ba9
203 changed files with 575 additions and 7302 deletions
@@ -0,0 +1,51 @@
+{ self, config, lib, pkgs, ... }:
+let inherit (lib) fileContents;
+in
+{
+  imports = [ ../cachix ];
+
+
+  fonts = {
+    fonts = with pkgs; [ powerline-fonts dejavu_fonts ];
+    fontconfig.defaultFonts = {
+      monospace = [ "DejaVu Sans Mono for Powerline" ];
+      sansSerif = [ "DejaVu Sans" ];
+    };
+  };
+
+  nix = {
+    settings = {
+      sandbox = true;
+      trusted-users = [ "root" "@wheel" ];
+      allowed-users = [ "@wheel" ];
+      auto-optimise-store = true;
+      system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
+    };
+    gc.automatic = true;
+    optimise.automatic = true;
+    extraOptions = ''
+      min-free = 536870912
+      keep-outputs = true
+      keep-derivations = true
+      fallback = true
+    '';
+  };
+
+  environment.systemPackages = with pkgs; [
+    pinentry_gnome
+    cached-nix-shell
+  ];
+
+  services.devmon.enable = true;
+
+  # For rage encryption, all hosts need a ssh key pair
+  services.openssh = {
+    enable = true;
+    openFirewall = lib.mkDefault false;
+  };
+
+  programs.gnupg.agent.enable = true;
+  #programs.gnupg.agent.pinentryFlavor = "curses";
+
+  services.earlyoom.enable = true;
+}