From 10b0df38b4286237b56ff9177f8d4c5676bfb5c1 Mon Sep 17 00:00:00 2001 From: seth Date: Mon, 30 Oct 2023 04:22:32 -0400 Subject: tree-wide: refactor i went overboard on modules. this is much comfier --- modules/nixos/server/default.nix | 39 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 modules/nixos/server/default.nix (limited to 'modules/nixos/server/default.nix') diff --git a/modules/nixos/server/default.nix b/modules/nixos/server/default.nix new file mode 100644 index 0000000..1f759ec --- /dev/null +++ b/modules/nixos/server/default.nix @@ -0,0 +1,39 @@ +{ + config, + lib, + pkgs, + inputs, + ... +}: { + imports = [ + ./acme.nix + ./secrets.nix + ]; + + _module.args.unstable = inputs.nixpkgs.legacyPackages.${pkgs.stdenv.hostPlatform.system}; + + documentation = { + enable = false; + + man = { + enable = false; + man-db.enable = false; + }; + + nixos.enable = false; + dev.enable = false; + }; + + environment.defaultPackages = lib.mkForce []; + + nix = { + gc = { + dates = "*-*-1,5,9,13,17,21,25,29 00:00:00"; + options = "-d --delete-older-than 2d"; + }; + + settings.allowed-users = [config.networking.hostName]; + }; + + security.pam.enableSSHAgentAuth = true; +} -- cgit v1.2.3