85 lines
1.6 KiB
Nix
85 lines
1.6 KiB
Nix
{
|
|
pkgs,
|
|
userName,
|
|
...
|
|
}: {
|
|
imports = [
|
|
../../pwrMgmt
|
|
../../networking/core.nix
|
|
../../virtualization/podman.nix
|
|
../../virtualization/quadlet.nix
|
|
../../virtualization/hardware.nix
|
|
];
|
|
|
|
# Enable flakes for NixOS
|
|
nix.settings.experimental-features = ["nix-command" "flakes"];
|
|
|
|
# Custom kernel/boot stuff
|
|
boot = {
|
|
kernelPackages = pkgs.linuxPackages_latest;
|
|
loader = {
|
|
systemd-boot.enable = true;
|
|
efi.canTouchEfiVariables = true;
|
|
};
|
|
};
|
|
|
|
# Enable Polkit
|
|
security.polkit.enable = true;
|
|
|
|
# Make sure Bluetooth is off!
|
|
hardware.bluetooth.enable = false;
|
|
|
|
# Set your timezone
|
|
time.timeZone = "America/Detroit";
|
|
|
|
# Power management module
|
|
pwrMgmt = {
|
|
enable = true;
|
|
cpuFreqGovernor = "performance";
|
|
powertop.enable = false;
|
|
};
|
|
|
|
# Podman module (see ../../virtualization/podman.nix)
|
|
podman = {
|
|
enable = true;
|
|
extraPackages = with pkgs; [
|
|
docker-credential-helpers
|
|
toolbox
|
|
cosign
|
|
crane
|
|
podman-tui
|
|
];
|
|
};
|
|
|
|
# Core networking module (see ../../networking/core.nix)
|
|
network = {
|
|
firewall.enable = true;
|
|
networkManager.enable = true;
|
|
};
|
|
|
|
programs = {
|
|
# Enable GnuPG
|
|
gnupg.agent = {
|
|
enable = true;
|
|
enableSSHSupport = true;
|
|
};
|
|
|
|
# Enable SUID wrappers (some programs need them)
|
|
mtr.enable = true;
|
|
};
|
|
|
|
users.users.${userName}.extraGroups = ["wheel" "video" "podman" "network"];
|
|
|
|
services = {
|
|
# Enable OpenSSH
|
|
openssh.enable = true;
|
|
};
|
|
|
|
# Install packages to be installed system-wide
|
|
environment.systemPackages = with pkgs; [
|
|
wireguard-tools
|
|
];
|
|
|
|
system.stateVersion = "25.05";
|
|
}
|