{ pkgs, userName, ... }: { imports = [ ../../pwrMgmt ../../networking/core.nix ../../virtualization/podman.nix ../../virtualization/quadlet.nix ../../virtualization/hardware.nix ]; # Enable flakes for NixOS nix.settings.experimental-features = ["nix-command" "flakes"]; # Custom kernel/boot stuff boot = { kernelPackages = pkgs.linuxPackages_latest; loader = { systemd-boot.enable = true; efi.canTouchEfiVariables = true; }; }; # Enable Polkit security.polkit.enable = true; # Make sure Bluetooth is off! hardware.bluetooth.enable = false; # Set your timezone time.timeZone = "America/Detroit"; # Power management module pwrMgmt = { enable = true; cpuFreqGovernor = "performance"; powertop.enable = false; }; # Podman module (see ../../virtualization/podman.nix) podman = { enable = true; extraPackages = with pkgs; [ docker-credential-helpers toolbox cosign crane podman-tui ]; }; # Core networking module (see ../../networking/core.nix) network = { firewall.enable = true; networkManager.enable = true; }; programs = { # Enable GnuPG gnupg.agent = { enable = true; enableSSHSupport = true; }; # Enable SUID wrappers (some programs need them) mtr.enable = true; }; users.users.${userName}.extraGroups = ["wheel" "video" "podman" "network"]; services = { # Enable OpenSSH openssh.enable = true; }; # Install packages to be installed system-wide environment.systemPackages = with pkgs; [ wireguard-tools ]; system.stateVersion = "25.05"; }