palette/nixos/configuration.nix
George Kaklamanos e0e32ffc84
Add firewall and kanata configuration
Signed-off-by: George Kaklamanos <gkaklas@gkaklas.gr>
2024-04-28 22:17:48 +03:00

82 lines
1.9 KiB
Nix

{
config,
lib,
pkgs,
...
}: {
imports = [
./hardware-configuration.nix
"${builtins.fetchTarball {
url = "https://github.com/nix-community/disko/archive/refs/tags/v1.5.0.tar.gz";
sha256 = "sha256:1d03a0wb710by1m2c3rx758vy67f8r71gnv2h3qn4jj1bx10sdg4";
}}/module.nix"
./disko.nix
./firewall.nix
./kanata.nix
];
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
networking.hostName = "kelly";
networking.networkmanager.enable = true;
time.timeZone = "Europe/Athens";
system.copySystemConfiguration = false;
system.stateVersion = "23.11";
programs.fish.enable = true;
users.users.gkaklas = {
isNormalUser = true;
extraGroups = ["wheel" "uinput"];
shell = pkgs.fish;
};
users.users.gkaklas.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHRvzNjXbCJ1/lIcZXdJSzkadYOIoAzZ2G2stoxZY7qz gkaklas@onyx"
];
#users.groups.uinput = {};
security.sudo.wheelNeedsPassword = false;
security.pam.services.gkaklas.kwallet.enable = true;
services.xserver.enable = true;
services.desktopManager.plasma6.enable = true;
services.displayManager = {
sddm.enable = true;
sddm.autoLogin.relogin = true;
autoLogin.enable = true;
autoLogin.user = "gkaklas";
defaultSession = "plasma";
sddm.wayland.enable = true;
};
services = {
openssh.enable = true;
openssh.settings.PasswordAuthentication = false;
pipewire.enable = true;
pipewire.pulse.enable = true;
flatpak.enable = true;
fprintd.enable = true;
fwupd.enable = true;
};
hardware = {
bluetooth.enable = true;
sensor.iio.enable = true;
};
powerManagement.enable = true;
xdg.portal.enable = true;
virtualisation.podman.enable = true;
nix = {
package = pkgs.nixFlakes;
extraOptions = ''
experimental-features = nix-command flakes
'';
};
}