Richie
b8b0605279
- move ZFS and snapshot manager settings out of the global base - group snapshot files under common/optional/zfs - enable the ZFS module on existing ZFS hosts - make the global tmpfs setting overridable
70 lines
1.2 KiB
Nix
70 lines
1.2 KiB
Nix
{
|
|
inputs,
|
|
lib,
|
|
outputs,
|
|
pkgs,
|
|
...
|
|
}:
|
|
{
|
|
imports = [
|
|
inputs.home-manager.nixosModules.home-manager
|
|
inputs.sops-nix.nixosModules.sops
|
|
./fail2ban.nix
|
|
./fonts.nix
|
|
./libs.nix
|
|
./locale.nix
|
|
./nh.nix
|
|
./nix.nix
|
|
./programs.nix
|
|
./ssh.nix
|
|
];
|
|
|
|
boot = {
|
|
tmp.useTmpfs = lib.mkDefault true;
|
|
kernelPackages = lib.mkDefault pkgs.linuxPackages_6_12;
|
|
};
|
|
|
|
hardware.enableRedistributableFirmware = true;
|
|
|
|
home-manager = {
|
|
useGlobalPkgs = true;
|
|
useUserPackages = true;
|
|
extraSpecialArgs = { inherit inputs outputs; };
|
|
backupFileExtension = "backup";
|
|
};
|
|
|
|
nixpkgs = {
|
|
overlays = builtins.attrValues outputs.overlays;
|
|
config = {
|
|
allowUnfree = true;
|
|
};
|
|
};
|
|
|
|
services = {
|
|
dbus.implementation = "dbus";
|
|
|
|
# firmware update
|
|
fwupd.enable = true;
|
|
};
|
|
|
|
powerManagement.powertop.enable = lib.mkDefault true;
|
|
|
|
programs.zsh.enable = true;
|
|
|
|
security = {
|
|
auditd.enable = lib.mkDefault true;
|
|
sudo-rs = {
|
|
enable = true;
|
|
execWheelOnly = true;
|
|
};
|
|
sudo.enable = false;
|
|
};
|
|
|
|
users.mutableUsers = lib.mkDefault false;
|
|
|
|
zramSwap = {
|
|
enable = lib.mkDefault true;
|
|
priority = 1000;
|
|
};
|
|
}
|