mirror of https://git.jolheiser.com/dotnix.git
51 lines
1.1 KiB
Nix
51 lines
1.1 KiB
Nix
|
{ pkgs, ... }:
|
||
|
|
let username = "jolheiser";
|
||
|
|
in {
|
||
|
|
imports = [ ./hardware.nix ../common ];
|
||
|
|
|
||
|
|
boot = {
|
||
|
|
kernelPackages = pkgs.linuxPackages_latest;
|
||
|
|
kernelParams = [ "quiet" "splash" ];
|
||
|
|
loader.grub = {
|
||
|
|
enable = true;
|
||
|
|
device = "/dev/sda";
|
||
|
|
useOSProber = true;
|
||
|
|
enableCryptodisk = true;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
boot.initrd.secrets = { "/crypto_keyfile.bin" = null; };
|
||
|
|
|
||
|
|
boot.initrd.luks.devices = {
|
||
|
|
"luks-1f9bde68-9c4c-423c-a95f-17aa170dd2b4".keyFile = "/crypto_keyfile.bin";
|
||
|
|
"luks-a2ca1842-1ce0-437e-ba5e-8864a41e81cb" = {
|
||
|
|
device = "/dev/disk/by-uuid/a2ca1842-1ce0-437e-ba5e-8864a41e81cb";
|
||
|
|
keyFile = "/crypto_keyfile.bin";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
hardware = { bluetooth.enable = true; };
|
||
|
|
|
||
|
|
networking = {
|
||
|
|
hostName = "matcha";
|
||
|
|
networkmanager.enable = true;
|
||
|
|
firewall.enable = true;
|
||
|
|
};
|
||
|
|
|
||
|
|
services = {
|
||
|
|
blueman.enable = true;
|
||
|
|
openssh.enable = true;
|
||
|
|
pcscd.enable = true;
|
||
|
|
};
|
||
|
|
|
||
|
|
virtualisation.docker.enable = true;
|
||
|
|
|
||
|
|
users.users."${username}" = {
|
||
|
|
extraGroups = [ "wheel" "docker" "storage" ];
|
||
|
|
isNormalUser = true;
|
||
|
|
shell = pkgs.nushell;
|
||
|
|
};
|
||
|
|
|
||
|
|
system.stateVersion = "22.11";
|
||
|
|
}
|