summaryrefslogtreecommitdiff
path: root/modules/nixos/base.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/nixos/base.nix')
-rw-r--r--modules/nixos/base.nix90
1 files changed, 0 insertions, 90 deletions
diff --git a/modules/nixos/base.nix b/modules/nixos/base.nix
deleted file mode 100644
index a5c4318..0000000
--- a/modules/nixos/base.nix
+++ /dev/null
@@ -1,90 +0,0 @@
-{
- config,
- lib,
- pkgs,
- inputs,
- ...
-}: let
- inherit (lib) mkDefault;
-in {
- imports = [
- ../shared
- ];
-
- environment.systemPackages = with pkgs; [man-pages man-pages-posix];
-
- documentation.nixos.enable = false;
-
- # not sure why i can't use this on darwin?
- environment.etc."nix/inputs/nixpkgs".source = lib.mkDefault inputs.nixpkgs.outPath;
-
- i18n = {
- supportedLocales = [
- "en_US.UTF-8/UTF-8"
- ];
-
- defaultLocale = "en_US.UTF-8";
- };
-
- networking.networkmanager = {
- enable = mkDefault true;
- dns = mkDefault "systemd-resolved";
- };
-
- nix = {
- channel.enable = mkDefault false;
- gc.dates = mkDefault "weekly";
- settings.trusted-users = ["root" "@wheel"];
- };
-
- programs = {
- git.enable = mkDefault true;
- vim.defaultEditor = mkDefault true;
- };
-
- security = {
- apparmor.enable = mkDefault true;
- audit.enable = mkDefault true;
- auditd.enable = mkDefault true;
- polkit.enable = mkDefault true;
- rtkit.enable = mkDefault true;
- sudo.execWheelOnly = true;
- };
-
- services = {
- dbus.apparmor = mkDefault "enabled";
-
- resolved = {
- enable = mkDefault true;
- dnssec = mkDefault "allow-downgrade";
- extraConfig = mkDefault ''
- [Resolve]
- DNS=1.1.1.1 1.0.0.1
- DNSOverTLS=yes
- '';
- };
-
- journald.extraConfig = ''
- MaxRetentionSec=1w
- '';
- };
-
- system.activationScripts."upgrade-diff" = {
- supportsDryActivation = true;
- text = ''
- ${pkgs.nvd}/bin/nvd --nix-bin-dir=${config.nix.package}/bin diff /run/current-system "$systemConfig"
- '';
- };
-
- users = {
- defaultUserShell = pkgs.bash;
- mutableUsers = false;
-
- users.root = {
- home = mkDefault "/root";
- uid = mkDefault config.ids.uids.root;
- group = mkDefault "root";
- hashedPasswordFile = mkDefault config.age.secrets.rootPassword.path;
- };
- };
-}